.png){kind=icon}
Return
Discriminating flash crowds from DDoS attacks using efficient thresholding algorithm
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jpdc.2021.02.019.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Distributed Denial-of-Service attacks have been a challenge to cyberspace, as the attackers send a large number of attack packets similar to the normal traffic, to throttle legitimate flows. These attacks intentionally disrupt the services offered by the systems resulting in heavy cost. A flash crowd or flash event is an unexpected surge in the number of visitors to a particular website resulting in a sudden increase in server load. Flash crowds, which are legitimate flows, are difficult to be discriminated from Distributed Denial-of-Service attacks that are illicit flows. Effective and accurate detection of Distributed Denial of Service attacks still remains a challenge due to the difficulty in its detection and the false alerts generated in the case of flash crowds. There is a trade off between detection rate and false positive rate. This work deals with an efficient and early detection of distributed denial of service attacks and discriminates flash crowd by considering two network traffic parameters such as packet size and destination IP address. Using these traffic features two attributes are computed and its generalized entropies are calculated. The threshold is computed using the mean value of network attributes to detect the attacks. Threshold updater can automatically adjust the threshold values according to the changes in the channel conditions. The data sets used to evaluate the performance of the proposed approach are the MIT Lincoln Laboratory DARPA data set and a data set generated in a University network. Experimental results show this research approach achieves higher detection rate and lower false positives in a much reduced processing time as compared to the existing methods. (C) 2021 Elsevier Inc. All rights reserved.
Keywords:
Network security
Tsallis entropy
DDoS attack
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
4
Papers:
3.8K
Citations:
4.8K
Organization
Cited Papers
Efficient DDoS flood attack detection using dynamic thresholding on flow-based network traffic.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
ShareSaveShareSaveCarbamazepine (TegretolR) Inhibits in Vivo Iodide Uptake and Hormone Synthesis in rat Thyroid Glands
PREAI
ShareSaveIsolation and X-ray characterization of a new crystal modification of Pd6(μ2-CO)6(μ-dppm)3 during the synthesis of the novel fluxional triangulo Pd(0) complex [Pd3(μ2-CO)3(dppm)2]n (n = 1 or 2)Polyhedron
PolyhedronIF0
PREAI
ShareSaveAn empirical evaluation of information metrics for low-rate and high-rate DDoS attack detection
PREAI
ShareSaveShareSave
View more