Defending DDoS attacks using hidden Markov models and cooperative reinforcement learning

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4430 LNCS, Issue , 2007, Pages 196-207

  Xu, Xin ^a   Sun, Yongqiang ^a   Huang, Zunguo ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; HIDDEN MARKOV MODELS; INTERNET; LEARNING ALGORITHMS; TELECOMMUNICATION SERVICES;

COOPERATIVE REINFORCEMENT LEARNING; INFORMATION COMMUNICATIONS;

INTRUSION DETECTION;

EID: 38049169479     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-71549-8_17     Document Type: Conference Paper

References (18)

1. Denning, D.: An Intrusion-Detection Model. IEEE Transactions on Software Engineering, Vol.13, No 2 (1987) 222-232
2. Lee, W.K., Stolfo, S.J.: A Data Mining Framework for Building Intrusion Detection Model. In: Gong L., Reiter M.K. (eds.): Proceedings of the IEEE Symposium on Security and Privacy. Oakland, CA: IEEE Computer Society Press (1999) 120-132
3. Mirkovic J. and Reiher P.: A Taxonomy of DDoS Attack and DDoS Defense Mechanisms. ACM SIGCOMM Computer Communications Review, 34(2), (2004) 39-54,.
4. Chang, R. K. C. Defending against flooding-based, distributed denial-of-service attacks: A tutorial, IEEE Communications Magazine 40(10), (2002) 42-51.
5. Feinstein, L., Schnackenberg, D.: Statistical Approaches to DDoS Attack Detection and Response. Proceedings of the DARPA Information Survivability Conference and Expostion(DISCEX'03), (2003) 3030314
6. Noh S., Lee C., Jung, G., Choi, K.: Using Inductive Learning for the Detection of Distributed Denial of Service Attacks, Lecture Notes in Computer Science, LNCS 2690, (2003) 286-295
7. Jin, S., Yeung, D. S.: A Covariance Analysis Model for DDoS Attack Detection. In: Proc. of the Int'l Conf. on Communications. IEEE, (2004) 1882-1886.
8. Li, M.: An Approach to Reliably Identifying Signs of DDoS Flood Attacks Based on LRD Traffic Pattern Recognition. Computer and Security, 23(7), (2004) 549-558.
9. Seo, J., Lee, C., Moon J.: Defending DDoS Attacks Using Network Traffic Analysis and Probabilistic Packet Drop. In Proc. of GCC 2004 Workshops, LNCS, Volume 3252, (2004) 390-397
10. Mirkovic, J., Prier, G. & Reiher, P.: Attacking DDoS at the Source, in Proceedings of International Conference on Network Protocols, Paris, France, (2002) 312-321.
11. Peng, T., Christopher, Kotagiri L, R.: Proactively Detecting Distributed Denial of Service Attacks Using Source IP Ad-dress Monitoring, in Proceedings of the Third International IFIP-TC6 Networking Conference, Berlin Heidelberg, Springer, (2004) 771-782
12. Rabiner, L.R.: A Tutorial on Hidden Markov Models and Selected Applications in Speech Recognition. Proceedings of the IEEE, 77(2), (1986) 257-286
13. Paxson, V,: An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks. Computer Communication Review 31(3), (2001) 76-89
14. Peng, T., Leckie, C., and Kotagiri, R.: Detecting Distributed Denial of Service Attacks by Sharing Distributed Beliefs, in Proc. of 8th Australasian Conference on Information Security and Privacy, Wollongong, Australia, Lecture Notes in Computer Science, LNCS 2727, (2003) 214-225
15. Jung, J., Krishnamurthy, B. and Rabinovich, M..: Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites. In Proceeding of 11th Word Wide Web conference. Honolulu, Hawaii, USA. (2002)
16. Sutton, R., and Barto, A. G.: Reinforcement Learning: An Introduction. MIT Press, Cambridge, MA, (1998).
17. Hu, J., Wellman, M. P.: Multiagent Reinforcement Learning: Theoretical Framework and an Algorithm. In 15th Intl Conference on Machine Learning, (1998) 242-250.
18. Xu, X.: A Reinforcement Learning Approach for Host-Based Intrusion Detection Using Sequences of System Calls. Lecture Notes in Computer Science, LNCS 3644, (2005) 995-1003