.png){kind=icon}
返回
Identifying Application-Layer DDoS Attacks Based on Request Rhythm Matrices
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2019.2950820.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Application-layer distributed denial of service (AL-DDoS) attacks are becoming critical threats to websites because the stealth of AL-DDoS attacks makes many intrusion prevention systems ineffective. To detect AL-DDoS attacks aimed at websites, we propose a novel statistical model called the RM (rhythm matrix). Although the original features from the network layer are adopted, the access trajectory, including requested objects and corresponding dwell-time values, can be abstracted and accumulated into an RM. With an RM, we can almost losslessly compress complex features into a simple structure and characterize the user access behavior. We detect AL-DDoS attacks according to the increase of the abnormality degree in the RM and further identify malicious hosts based on change-rate outliers. In the experiments, we simulate three modes of AL-DDoS attacks with the latest popular DDoS attack tools: LOIC and HOIC. The results show that our method can detect these simulated attacks and identify the malicious hosts accurately and efficiently. For an AL-DDoS detection method, the ability to distinguish flash crowds is indispensable. We also demonstrate the excellent performance of our approach in distinguishing flash crowds from AL-DDoS attacks with two reconstructed public datasets.
Keyword:
Network security
application-layer DDoS attack
anomaly detection
rhythm matrix
outliers
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
分享收藏Efficient DDoS flood attack detection using dynamic thresholding on flow-based network traffic基于流的网络流量动态阈值的高效DDoS洪水攻击检测.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Isolation and X-ray characterization of a new crystal modification of Pd6(μ2-CO)6(μ-dppm)3 during the synthesis of the novel fluxional triangulo Pd(0) complex [Pd3(μ2-CO)3(dppm)2]n (n = 1 or 2)Polyhedron
PolyhedronIF0
PREAI
分享收藏
查看更多内容