Real-time detection of distributed denial-of-service attacks using RBF networks and statistical features

Computer Networks

Volumn 48, Issue 2, 2005, Pages 235-245

  Gavrilis, Dimitris ^a   Dermatas, Evangelos ^a  

^a UNIVERSITY OF PATRAS   (Greece)

Author keywords

Computer security; Denial of service attacks; Intrusion detection; Neural networks; RBF networks

Indexed keywords

COMPUTER SIMULATION; ESTIMATION; PACKET NETWORKS; RADIAL BASIS FUNCTION NETWORKS; REAL TIME SYSTEMS; SECURITY OF DATA; STATISTICAL METHODS;

COMPUTER RESOURCES; DENIAL-OF-SERVICE ATTACKS; INTRUSION DETECTION; PUBLIC NETWORKS;

TELECOMMUNICATION SERVICES;

EID: 16644393989     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2004.08.014     Document Type: Article

References (24)

1. P. Mell, D. Marks, and M. McLarnon A denial-of-service Computer Networks 34 2000 641 658
2. T. Ptacek, and T. Newsham Insertion, Evasion, and Denial-of-Service: Eluding Network Intrusion Detection 1998 Secure Networks Inc.
3. J. Ryan, M. Lin, and R. Miikkulainen Intrusion detection with neural networks Advances in Neural Information Processing Systems vol. 10 1998 MIT Press Cambridge, MA
4. R. Barder The evolution of intrusion detection systems-the next step Computer & Security 20 1 2001 132 145
5. R. Graham NIDS-pattern search vs. protocol decode Computer & Security 20 1 2001 37 41
6. L. Me, GASSATA, A genetic algorithm as an alternative tool for security audit trails analysis, First International Workshop on the Recent Advances in Intrusion Detection, Belgium, 1998
7. J. Bonifacio, A. Casian, CPLF de A. Carvalho, E. Moreira, Neural networks applied in intrusion detection systems, in: Proceedings of the Word Congress on Computational Intelligence-WCCI, Anchorage, USA, 1998, pp. 205-210
8. Y. Liao, and R. Vemuri Use of K-nearest neighbor classifier for intrusion detection Computer & Security 21 5 2001 439 448
9. M. Baltatu, A. Lioy, F. Maino, and D. Mazzocchi Security issues in control, management and routing protocols Computer Networks 34 2000 881 894
10. Y.W. Chen, Study on the prevention of SYN flooding by using traffic policing, IEEE Symposium on Network Operations and Management, 2000, pp. 593-604
11. C. Schuba, I. Krsul, M. Kuhn, E. Spafford, A. Sundaram, D. Zamboni, Analysis of a denial-of-service attack on TCP, in: Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, USA, 1997, pp. 208-223
12. R. Lippmann, and R. Cunnigham Improving intrusion detection performance using Keyword selection and neural networks Computer Networks 34 2000 596 603
13. W. Scwartau Surviving denial-of-service Computers & Security 18 2 1999 124 133
14. F. Lau, S. Rubin, M. Smith, L. Trajkovic, Distributed denial-of-service attacks, in: Proceedings of the IEEE International Conference on Systems, Man and Cybernetics, vol. 3, 2000, pp. 2275-2280
15. J. Cabrera, B. Ravichandran, R. Mehra, Statistical traffic modeling for network intrusion detection, IEEE International Workshop on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems, 2000, pp. 466-473
16. D. Cox, K. McClanahan, Method for blocking denial of service and address spoofing attacks on a private network, Patent WO9948303, Cisco Tech Ind (US), 1999
17. K. Narayanaswamy, T. Ross, B. Spinney, M. Paquette, C. Wright, System and process for defending against denial of service attacks on network nodes, Patent WO0219661, Top Layer Networks Inc. (US), 2002
18. R. Maher, V. Bennett, Method for preventing denial of service attacks, Patent WO0203084, Netrake Corp (US), 2002
19. J. Belissent, Method and apparatus for preventing a denial of service (DOS) attack by selectively throttling TCP/IP requests, Patent WO0201834, Sun Microsystems Inc. (US), 2002
20. A. Bivens, C. Palagiri, R. Smith, B. Szymanski, M. Embrechts, Network-based intrusion detection using neural networks (2002), Artificial Neural Networks In Engineering November 10-13, St. Louis, Missouri, 2002
21. W. Streilein, R.K. Cunningham, S.E. Webster, Improved detection of low-profile probe and novel denial-of-service attacks (2002), Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection, Baltimore, Maryland, June 2002, pp. 11-13
22. H. Debar, M. Baker, D. Siboni, A neural network component for an intrusion detection system, in: Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, 1992
23. C. Douligeris, and A. Mitrokotsa DDoS attacks and defense mechanisms: classification and state-of-the-art Computer Networks 44 5 2004 643 666
24. S. Haykin Neural Networks: A Comprehensive Foundation 1994 Predice Hall Upper Saddle River, NJ