Low-rate DoS detection method based on feature extraction using wavelet transform

Ruan Jian Xue Bao/Journal of Software

Volumn 20, Issue 4, 2009, Pages 930-941

  He, Yan Xiang ^a   Cao, Qiang ^a   Liu, Tao ^a   Han, Yi ^a   Xiong, Qi ^a  

^a WUHAN UNIVERSITY   (China)

Author keywords

BP neural network; Feature extraction; LDoS (low rate denial of service) attack; Wavelet analysis

Indexed keywords

BP NEURAL NETWORK; COMPUTATION COSTS; DETECTION METHODS; DETECTION SYSTEMS; DISTRIBUTED DOS; HIGH DETECTION RATES; LDOS (LOW-RATE DENIAL-OF-SERVICE) ATTACK; MONI-TORING NODES; MULTI-SCALE ANALYSIS; NETWORK TRAFFICS; SHORT BURSTS; SIMULATION RESULTS;

INTERNET; NEURAL NETWORKS; WAVELET ANALYSIS; WAVELET TRANSFORMS;

FEATURE EXTRACTION;

EID: 65349165972     PISSN: 10009825     EISSN: None     Source Type: Journal    
DOI: 10.3724/SP.J.1001.2009.03302     Document Type: Article

References (18)

1. Kuzmanovic A, Knightly EW. Low-Rate TCP-targeted denial of service attacks-the shrew vs. the mice and elephants. In: Proc. of the ACM SIGCOMM 2003. New York: ACM Press, 2003. 75-86. http://byte.csc.lsu.edu/-durresi/7502/reading/p75-kuzmanovic.pdf
2. Sarat S, Terzis A. On the effect of router buffer sizes on low-rate denial of service attacks. In: Proc. of the 14th Int'l Conf. on Computer Communications and Networks (ICCCN 2005). New York: IEEE Press, 2005. 281-286. http://www.cs.jhu.edu/-sarat/ICCCN05.pdf
3. Kwok YK, Tripathi R, Chen Y, Hwang K. HAWK: Halting anomalies with weighted choking to rescue well-behaved TCP sessions from shrew DDoS attacks. In: Proc. of the 3rd Int'l Conf. on Networking and Mobile Computing (ICCNMC 2005). New York: Springer-Verlag, 2005. 423-432. http://gridsec.usc.edu/files/TR/HAWK-ICCNMC2005-CameraReady.pdf
4. Sun H, Lui JCS, Yau DKY. Defending against low-rate TCP attacks: Dynamic detection and protection. In: Proc. of the 12th IEEE Int'l Conf. on Network Protocols (ICNP 2004). New York: IEEE Press, 2004. 196-205. http://www.cse.cuhk.edu.hk/-cslui/PUBLICATION/icnp_lowrate.pdf
5. Sun H, Lui JCS, Yau DKY. Distributed mechanism in detecting and defending against the low-rate TCP attack. Computer Networks, 2006, 50(13): 2312-2330.
6. Chen Y, Hwang K. Collaborative detection and filtering of shrew DDoS attacks using spectral analysis. Journal of Parallel and Distributed Computing, 2006, 66(9): 1137-1151.
7. Guirguis M, Bestavros A, Matta I. Exploiting the transients of adaptation for RoQ attacks on Internet resources. In: Proc. of the 12th IEEE Int'l Conf. on Network Protocols (ICNP 2004). New York: IEEE Press, 2004. 184-195. http://www.ieee-icnp.org/2004/papers/5-2.pdf
8. Luo XP, Chang RKC. On a new class of pulsing denial-of-service attacks and the defense. In: Proc. of the Network and Distributed System Security Symp. (NDSS 2005). Reston: Internet Society, 2005. http://www.isoc.org/isoc/conferences/ndss/05/proceedings/ papers/new_pulsing_DOS.pdf
9. Chertov R, Fahmy S, Shroff NB. Emulation versus simulation: A case study of TCP-targeted denial of service attack. In: Proc. of the 2nd IEEE Conf. on Testbeds and Research Infrastructures for the Development of Networks and Communities (TRIDENTCOM 2006). New York: IEEE Press, 2006. http://cobweb.ecn.purdue.edu/-shroff/Shroff/conference/ CheFahShr-tridentcom.pdf
10. Chen Y, Hwang K. Spectral analysis of TCP flows for defense against reduction-of-quality attacks. In: Proc. of the 2007 IEEE Int'l Conf. on Communications (ICC 2007). New York: IEEE Press, 2005. 1203-1210. http://pods.binghamton.edu/-ychen/PID364015.pdf
11. Abry P, Veitch D. Wavelet analysis of long-range-dependent traffic. IEEE Trans. on Information Theory, 1998, 44(1): 2-15.
12. Mallat S, Hwang WL. Singularity detection and processing with wavelets. IEEE Trans. on Information Theory, 1992, 38(2): 617-643.
13. Xu C, Zhao RZ, Gan XB. Wavelet Analysis and its Application. Beijing: Science Press, 2004. 81-117 (in Chinese).
14. Shen SY. Theory and Application of Neural Networks. Beijing: Science Press, 1998. 31-62 (in Chinese).
15. Thompson K, Miller GJ, Wilder R. Wide-Area Internet traffic patterns and characteristics. IEEE Network, 1997, 11(6): 10-23.
16. Daubechies I, Wrote; Li JP, Yang WN, Trans. Ten Lectures on Wavelets. Beijing: National Defense Industry Press, 2004. 127-153 (in Chinese).
17. GT-ITM: Georgia Tech Internet Topology Models. http://www.cc.gatech.edu/projects/gtitm/
18. Hastings NE, McLean PA. TCP/IP spoofing fundamentals. In: Proc. of IEEE the 15th Annual Int'l Phoenix Conf. on Computers and Communications. Scottsdale: IEEE Press, 1996. 218-224.