A system approach to network modeling for DDoS detection using a Naìve Bayesian classifier

2011 3rd International Conference on Communication Systems and Networks, COMSNETS 2011

Volumn , Issue , 2011, Pages

  Vijayasarathy, R ^a   Ravindran, Balaraman ^b   Raghavan, S V ^b  

^a Society for Electronic Transactions and Security   (India)

^b INDIAN INSTITUTE OF TECHNOLOGY MADRAS   (India)

Author keywords

[No Author keywords available]

Indexed keywords

BAYESIAN; BAYESIAN CLASSIFIER; CLASSIFIER MODELS; CRITICAL INFORMATION; DDOS ATTACK; DDOS DETECTION; DENIAL OF SERVICE ATTACKS; DETECTING ATTACKS; DOS ATTACKS; HIGHLY SENSITIVE; NETWORK MODELING; SYSTEM APPROACH;

BAYESIAN NETWORKS; COMMUNICATION SYSTEMS; COMPUTER CRIME; CRITICAL INFRASTRUCTURES; INTERNET PROTOCOLS; SECURITY OF DATA; TRANSMISSION CONTROL PROTOCOL;

KNOWLEDGE BASED SYSTEMS;

EID: 79952567907     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/COMSNETS.2011.5716474     Document Type: Conference Paper

References (22)

1. M. Yamamura, http://service1.symantec.com/sarc/sarc.nsf/html/W32.DoS. Trinoo.html.
2. D. Dittrich, "The stacheldraht distributed denial of service attack tool," http://staff.washington.edu/dittrich/misc/stacheldraht.analysis, December 1999.
3. D. Bernstein, "Syn cookies," http://cr.yp.to/syncookies.html.
4. A. Juels and J. G. Brainard, "Client puzzles: A cryptographic countermeasure against connection depletion attacks," in NDSS, 1999.
5. T. Aura, P. Nikander, and J. Leiwo, "Dos-resistant authentication with client puzzles," in Lecture Notes in Computer Science. Springer-Verlag, 2000, pp. 170-177. (Pubitemid 33347515)
6. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred, "Statistical approaches to ddos attack detection and response," in Proc. DARPA Information Survivability Conference and Exposition, 2003, vol. 1, Apr. 2003, pp. 303-314.
7. S. Jin and D. Yeung, "A covariance analysis model for ddos attack detection," in Communications, 2004 IEEE International Conference, China, Jun. 2004, pp. 1882-1886.
8. S.-Y. Jin and D. Yeung, "Ddos detection based on feature space modeling," in Proc. of 2004 International Conference on Machine Learning and Cybernetics, vol. 7. IEEE Press, Aug. 2004, pp. 4210-4215.
9. Z. Zhou, D. Xie, and W. Xiong, "A novel distributed detection scheme against ddos attack," Journal of Networks(JNW), vol. 4, no. 9, pp. 921- 928, Nov 2009.
10. Y. Xie and S.-Z. Yu, "A novel model for detecting application layer ddos attacks," in IMSCCS '06: Proceedings of the First International Multi-Symposiums on Computer and Computational Sciences - Volume 2 (IMSCCS'06). Washington, DC, USA: IEEE Computer Society, 2006, pp. 56-63. (Pubitemid 44930605)
11. J. Seo, C. Lee, T. Shon, K.-H. Cho, and J. Moon, "A new ddos detection model using multiple svms and tra," in Machine Learning and Cybernetics, vol. 3823. Springer, 2005.
12. T. Shon, Y. Kim, C. Lee, and J. Moon, "A machine learning framework for network anomaly detection using svm and ga," in Information Assurance Workshop, 2005. IAW '05. Proceedings from the Sixth Annual IEEE SMC, Nagoya, Japan, Jun. 2005, pp. 176-183. (Pubitemid 43948720)
13. D. Gavrilis and E. Dermatas, "Real-time detection of distributed denial-of-service attacks using rbf networks and statistical features," Comput. Netw. ISDN Syst., vol. 48, no. 2, pp. 235-245, 205.
14. Y. Xiang and W. Zhou, "Mark-aided distributed filtering by using neural network for ddos defense," in Global Telecommunications Conference, 2005. GLOBECOM '05. IEEE, Nov. 2005, p. 5pp.
15. M. V. Mahoney and P. K. Chan, "Learning nonstationary models of normal network traffic for detecting novel attacks," in KDD 02: Proceedings of the eighth ACM SIGKDD international conference on Knowledge discovery and data mining, 2002, pp. 376-385.
16. J. Kang, Y. Zhang, and J. bin Ju, "Detecting ddos attacks based on multistream fused hmm in source-end network," in International Conference on Cryptography and Network Security, 2006.
17. X. Xu, Y. Sun, and Z. Huang, "Defending ddos attacks using hidden markov models and cooperative reinforcement learning," in PAISI'07: Proceedings of the 2007 Pacific Asia conference on Intelligence and security informatics. Berlin, Heidelberg: Springer-Verlag, 2007, pp. 196-207.
18. J. Mirkovic and P. Reiher, "A taxonomy of ddos attack and ddos defense mechanisms," SIGCOMM Comput. Commun. Rev., vol. 34, no. 2, pp. 39-53, 2004.
19. K.-C. Khor, C.-Y. Ting, and S.-P. Amnuaisuk, "From feature selection to building of bayesian classifiers: A network intrusion detection perspective," American Journal of Applied Sciences 6 (11), pp. 1949- 1960, 2009.
20. D. M. Farid, N. Harbi, and M. Z. Rahman, "Combining naive bayes and decision tree for adaptive intrusion detection," CoRR, vol. abs/1005.4496, Apr. 2010.
21. "Kdd cups 1999 data," http://kdd.ics.uci.edu/databases/ kddcup99/ kddcup99.html, October 1999.
22. "Darpa intrusion detection datasets," http://www.ll.mit.edu/ mission/communications/ist/corpora/ideval/data/index.html.