A new approach for detecting DDoS attacks based on wavelet analysis

Proceedings of the 2009 2nd International Congress on Image and Signal Processing, CISP'09

Volumn , Issue , 2009, Pages

  Li, Muhai ^a,b   Li, Ming ^a  

^a EAST CHINA NORMAL UNIVERSITY   (China)

^b ZAOZHUANG UNIVERSITY   (China)

Author keywords

DDoS attack; Detection; Model; Wavelet transform

Indexed keywords

ABRUPT CHANGE; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE ATTACK; FALSE ALARMS; NEW APPROACHES; SECURITY PROBLEMS;

DISCRETE WAVELET TRANSFORMS; SIGNAL DETECTION; SIGNAL PROCESSING; WAVELET ANALYSIS;

COMPUTER CRIME;

EID: 73849116400     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CISP.2009.5300903     Document Type: Conference Paper

References (26)

1. J. Mirkovic, S. Dietrich, D. Dittrich, and P. Reiher, "Internet Denial of Service: attack and defense Mechanisms," Prentice Hall PTR, Dec. 2000.
2. D. Moore, G. M. Voelker, and S. Savage, "Inferring internet denial-ofservice activity," Proc. Usenix Security Symp, Usenix Assoc., 2001. http://citeseer.ist.psu.edu/moore 01inferring.html
3. CERT, "Overview of attack trends," http://www. cert.org/archive/pdf/attack-trends.pdf, 2002.
4. L. Gordon et al., "CSI/FBI Computer Crime and Security Survey," Computer Security Inst., 2004; http://i.cmpnet.com/gocsi/dbarea/pdfs/ fbi/FBI 2004.pdf.
5. Editorial, "Distributed Denial-of-service and Intrusion Detection," Journal of Network and Computer Applications, vol. 30, 2007, pp. 819-822.
6. G. Carl, G. Kesidis, R. R. Brooks, and S. Rai, "Denial-of-service attack detection techniques," IEEE Internet Computing, vol.10, no. 1, 2006, pp. 82-89.
7. S. Papavassiliou, M. Pace, and L. Ho, "Implementing enhanced network maintenance for transaction access services: Tools and applications," IEEE International Conference on Communications, vol. 1, 2000, pp. 211- 215
8. D. H. Kang, B. K. Kim, and J. T. Oh, "Protocol anomaly and pattern matching based intrusion detection system," WSEAS Transactions on Communication, vol.4, no. 10, 2005, pp. 994-1101.
9. M. Thottan and J. Chuanyi, "Anomaly detection in ip networks," IEEE Trans. on Signal Processing, vol. 51, no. 8, 2003, pp. 2191-2204.
10. L. Feinstein, and et al., "Statistical approaches to DDoS attack detection and response," Proc., DARPA information survivability conference and exposition proceedings, vol. 1, 2003, pp. 303-314.
11. M. Li, "An approach to reliably identifying signs of DDoS flood attacks based on LRD traffic pattern recognition," Computers & Security, vol. 23, 2004, pp. 549-558.
12. M. H. Li, M. Li, and X. Y. Jiang, "DDoS attacks detection model and its application," WSEAS Transactions on Computers, Issue 8, vol. 7, 2008, pp. 1159-168.
13. M. Li, "Change trend of averaged Hurst parameter of traffic under DDoS flood attacks," Computers & Security, vol. 25, no. 3, 2006, pp. 213-220.
14. P. Abrey, R. Baraniuk, P. Flaudrin, R. Riedi, and D. Veitch, "Multiscale nature of network traffic," IEEE Signal Processing Magazine, 2002, pp. 28-46.
15. S. Mallat, "A Wavelet tour of signal processing," Academic Press, USA, 2nd edition, 1999.
16. A. Ramanarran, "WADES: a tool for distributed denial of service attack detection," M.S. thesis Texas A&M University, College Station, Tex, USA, 2002.
17. L. Li and G. Lee, "DDoS attack detection and wavelets," Proceedings of 12th International Conference on Computer Communications and Networks (ICCCN '03), 2003, pp. 421-427.
18. G. Carl, R. R. Brooks, and S. Rai, "Wavelet based denial-of-service detection," Computers & Security, vol. 25, 2006, pp. 600-615.
19. P. Barford, J. Kline, D. Plonka, and A. Ron, "A signal analysis of network traffic anomalies," Proceedings of ACM SIGCOMM, Marseille, France, 2002, pp. 71-82.
20. A. Lakhina, M. Crovella, and C. Diot, "Diagnosing network-wide traffic anomalies," SIGCOMM '04, vol. 34, Issue 4, 2004, pp. 219-230.
21. B. Liu, Y. Li, Y. Hou, and X. Sui. "The identification and correction of outline based on wavelet transformation of traffic flow," Proceedings of the 2007 International Conference on Wavelet Analysis and Pattern Recognition, Beijing, China, 2007, pp. 2-4.
22. S. S. Kim, A. L. N. Reddy, and M. Vannucci, "Detecting traffic anomalies through aggregate analysis of packet header data," International IFIT-TC6 Networking Conference, Greece, vol. 3042, 2004, pp. 1047-1059.
23. K.-L. Tian and M. Li, "A reliable anomaly detector against low-rate DDOS attack," in press, International Journal of Electronics and Computers, vol. 1, no. 1, 2009, pp. 1-6.
24. M. Li and W. Zhao, "Detection of variations of local irregularity of traffic under DDOS flood attack," Mathematical Problems in Engineering, Vol. 2008, 2008.
25. M. Li and S. C. Lim, "Modeling network traffic using generalized Cauchy process," Physica A, vol. 387, no. 11, 2008, pp. 2584-2594.
26. M. Li, S. C. Lim, and W. Zhao, "Investigating multi-fractality of network traffic using local Hurst function," Advanced Studies in Theoretical Physics, vol. 2, no. 10, 2008, pp. 479-490.