A flooding-based DDoS detection algorithm based on non-linear preprocessing network traffic predicted method

Jisuanji Xuebao/Chinese Journal of Computers

Volumn 34, Issue 2, 2011, Pages 395-405

  Yang, Xin Yu ^a   Yang, Shu Sen ^a   Li, Juan ^a  

^a XI'AN JIAOTONG UNIVERSITY   (China)

Author keywords

Distributed denial of service; Network traffic prediction; Non linear preprocessing; Real time detection

Indexed keywords

ACCURACY RATE; CLASSIC ALGORITHM; DDOS ATTACK; DDOS DETECTION; DETECTION ALGORITHM; DETECTION METHODS; DETECTION RATES; DISTRIBUTED DENIAL OF SERVICE; EFFICIENT ALGORITHM; NETWORK CHARACTERISTICS; NETWORK TRAFFIC; NON-LINEAR; REAL-TIME DETECTION;

FORECASTING; SIGNAL DETECTION; TRANSMISSION CONTROL PROTOCOL; WAVELET ANALYSIS;

ALGORITHMS;

EID: 79953663971     PISSN: 02544164     EISSN: None     Source Type: Journal    
DOI: 10.3724/SP.J.1016.2011.00395     Document Type: Article

References (18)

1. Comp. Emergency Response Team. Result of the Distributed-Systems Intruder Tools Workshop. http://www.cert.org/nav/allpubs.html
2. Peng Tao, Leckie Christopher, Ramamohanarao Kotagiri. Survey of network-based defense mechanisms countering the DoS and DDoS problems. ACM Computing Surveys, 2007, 39(1): 3
3. Cheng Chen-Mou, Kung H T, Tan Koan-Sin. Use of spectral analysis in defense against DoS attacks//Proceedings of the IEEE GLOBECOM. Taipei, Taiwan, 2002, 3: 2143-2148
4. Paul Barford, Jeffery Kline, David Plonka et al. A signal analysis of network traffic anomalies//Proceedings of the ACM SIGCOMM Internet Measurement Workshop. Marseilles, France, 2002: 71-82
5. Broido Andre, Nemeth Evi, Claffy K C. Spectroscopy of DNS update traffic//Proceedings of the ACM SIGMETRICS. San Diego, CA, 2003, 31(1): 320-321
6. Partridge Craig, Cousins David, Jackson Alden et al. Using signal processing to analyze wireless data traffic//Proceedings of the ACM Workshop on Wireless Security. Atlanta, GA, 2002: 67-76
7. Wang Hai-Ning, Zhang Dan-Lu, Shin Kang G. Detecting SYN flooding attacks//Proceedings of the 21st Annual Joint Conference of the IEEE Computer and Communications Societies. New York, NY, USA, 2002, 3: 1530-1539
8. Caberera J B D, Ravichandran B, Mehra R K. Statistical traffic modeling for network intrusion detection//Proceedings of the 8th International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems. San Francisco, California, USA, 2000: 466-473
9. Li Jin-Ming, Wang Ru-Chuan. Real-time detection of DDoS attack based on VTP. Acta Electronica Sinica, 2007, 35(4): 791-796(in Chinese)
10. Li Lan, Lee Gyungho. DDoS attack detection and wavelets//Proceedings of the Computer Communications and Networks. Dallas, TX 75240, USA, 2003: 421-427
11. Ren Xun-Yi, Wang Ru-Chuan, Wang Hai-Yan. Wavelet analysis method for detection of DDoS attack based on self-similar. Journal on Communications, 2006, 27(5): 6-11(in Chinese)
12. Nash D A, Ragsdale D J. Simulation of self-similarity in network utilization patterns as a precursor to automated testing of intrusion detection systems. IEEE Transactions on Systems, Man and Cybernetics, Part A, 2001, 31(4): 327-331
13. Yang Xin-Yu, Liu Yong, Zeng Ming, Shi Yi. A novel DDoS attack detecting algorithm based on the continuous wavelet transform//Proceedings of the Advanced Workshop on Content Computing. Zhenjiang, China, 2004, 3309: 173-181
14. Shu Yang-Tai, Jin Zhi-Gang, Zhang Lian-Fang, Wang Lei. Traffic prediction using FARIMA models//Proceedings of the IEEE International Conference on Communications. Vancouver, Canada, 1999, 2: 891-895
15. Sadek N, Khotanzad A. Multi-scale high-speed network traffic prediction using k-factor Gegenbauer ARMA model//Proceedings of the IEEE International Conference on Communications. Paris, France, 2004, 4: 2148-2152
16. Ge Xiao-Hu, Zhu Guang-Xi, Zhu Yao-Ting. On the testing for alpha-stable distributions of network traffic. Computer Communications, 2004, 27(5): 447-457
17. Leland W E, Taqqu M S, Willinger W, Wilson D V. On the self-similar nature of ethernet traffic. IEEE/ACM Transactions on Networking, 1994, 2(1): 1-15
18. Gennandy Samorodnitsky. Long Memory and Self-Similar Processes. Universite Paul Sabatier. Annales de la Faculte des Sciences de Toulouse. [OL]. Available: http://afst.cedram.org/item?id=AFST_2006_6_15_1_107_0, 2006, XV(1): 107-123