arrow
Return

DDoS attack detection method using cluster analysis

delete2008-04-01
delete182
PRE
AI
J
Juhyun Kim
K
Ki Hoon Kwon
K
Kim, Sehun
DOI:10.1016/j.eswa.2007.01.040delete
deleteOriginal
deleteShare
deleteSave
Abstract

Abstract

En 中文
Distributed Denial of Service (DDoS) attacks generate enormous packets by a large number of agents and can easily exhaust the computing and communication resources of a victim within a short period of time. In this paper, we propose a method for proactive detection of DDoS attack by exploiting its architecture which consists of the selection of handlers and agents, the communication and compromise, and attack. We look into the procedures of DDoS attack and then select variables based on these features. After that, we perform cluster analysis for proactive detection of the attack. We experiment with 2000 DARPA Intrusion Detection Scenario Specific Data Set in order to evaluate our method. The results show that each phase of the attack scenario is partitioned well and we can detect precursors of DDoS attack as well as the attack itself. (C) 2007 Elsevier Ltd. All rights reserved.
Keywords:
DDoS
proactive detection
security
cluster analysis

Journal

Expert Systems with Applications cover
Expert Systems with Applications
IF:
7.5
Papers:
3.0W
Citations:
12.7W

Organization

No organization information available
Cited Papers

Cited Papers

Postural stimulation test in patients with aldosterone producing adenomas
err2008-03-17
err0
PREAI
errT. Feltynowski; H. Ignatowska‐Switaiska; B. Woclal; J. Lewandowski; J. Chodakowska; W. Januszewicz
errShare
errSave
PAID: A Probabilistic Agent-Based Intrusion Detection system
err2005-10-01
err35
errOAAI
errGowadia, V; Farkas, C; Valtorta, M
errShare
errSave
errShare
errSave
An Introduction to Density Functional Theory
err2007-01-05
err0
PREAI
errLibero J. Bartolotti; Ken Flurchick
errShare
errSave
researcher View more