Joint entropy analysis model for DDoS attack detection

5th International Conference on Information Assurance and Security, IAS 2009

Volumn 2, Issue , 2009, Pages 267-271

  Rahmani, Hamza ^a   Sahli, Nabil ^a   Kammoun, Farouk ^a  

^a UNIVERSITY OF MANOUBA   (Tunisia)

Author keywords

Central limit theorem; Distributed Denial of service; Joint entropy; Probability distribution; Stochastic process

Indexed keywords

AGGREGATE TRAFFIC; ANOMALY DETECTION; ATTACK DETECTION; BEHAVIOUR MODELLING; CENTRAL LIMIT THEOREM; DDOS ATTACK; DDOS DETECTION; DISTRIBUTED DENIAL OF SERVICE; DISTRIBUTED DENIAL OF SERVICE ATTACK; FLOW NUMBER; JOINT ENTROPY; NETWORK TRAFFIC; STOCHASTIC PROCESS; TARGET MACHINES; TRAFFIC DISTRIBUTIONS;

CHEMICAL DETECTION; ENTROPY; INTERACTIVE COMPUTER SYSTEMS; INTERNET PROTOCOLS; NETWORK SECURITY; PROBABILITY DISTRIBUTIONS; RANDOM PROCESSES; STOCHASTIC SYSTEMS; TELECOMMUNICATION TRAFFIC; TIME SERIES; TRANSMISSION CONTROL PROTOCOL;

COMPUTER CRIME;

EID: 74049149137     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAS.2009.298     Document Type: Conference Paper

References (8)

1. D. Dittrich, "Distributed denial of service attacks/tools page," http://staff.washington.edu/dittrich/misc/ddos/
2. Krishan Kumar, R.C. Joshil and Kuldip Singh, "A Distributed Approach using Entropy to Detect DDoS Attacks in ISP Domain," IEEE-ICSCN 2007, MIT Campus, Anna University, Chennai, India, 2007, pp.331-337.
3. Anukool Lakhina, Mark Crovella and Christophe Diot, "Mining Anomalies Using Traffic Feature Distributions," SIGCOMM, Philadelphia, USA, 2005, pp.217-228.
4. Amit Kulkarni and Stephen Bush, "Detecting distributed denial-of-service attacks using kolmogorov complexity metrics," Journal of Network and Systems Management, Vol. 14, No. 1, March 2006, pp.69-80.
5. Arno Wagner and Bernhard Plattner, "Entropy Based Worm and Anomaly Detection in Fast IP Networks," 14th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprise, 2005.
6. E. Earl Eiland Dand Lorie M. Liebrock, "An Application of Information Theory to Intrusion Detection," Fourth IEEE International Workshop on Information Assurance, 2006.
7. https://www.data.caida.org/
8. http://www.caida.org/projects/ditl/