Real time DDoS detection using fuzzy estimators

Computers and Security

Volumn 31, Issue 6, 2012, Pages 782-790

  Shiaeles, Stavros N ^a   Katos, Vasilios ^a   Karakos, Alexandros S ^a   Papadopoulos, Basil K ^a  

^a DEMOCRITUS UNIVERSITY OF THRACE   (Greece)

Author keywords

cuts; Anomaly based intrusion detection; Distributed denial of service attacks; Fuzzy estimators; Poisson arrival

Indexed keywords

ANOMALY-BASED INTRUSION DETECTION; DDOS DETECTION; DETECTION WINDOWS; DISTRIBUTED DENIAL OF SERVICE ATTACK; EMPIRICAL EVALUATIONS; FUZZY ESTIMATORS; INTER-ARRIVAL TIME; IP ADDRESSS; POISSON ARRIVAL; REAL TIME; REAL TIME CONSTRAINTS; STATISTICAL DESCRIPTORS;

INTRUSION DETECTION; NETWORK SECURITY;

ESTIMATION;

EID: 84865258778     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2012.06.002     Document Type: Article

References (42)

1. Ari, I.; Hong, B.; Miller, E.; Brandt, S. Long, D. Managing Flash Crowds on the Internet. In: Proceedings of the 11TH IEEE/ACM International Symposium on Modeling, Analysis and Simulation of Computer Telecommunications Systems (MASCOTS'03); 2003.
2. M. Arlitt, and C. Williamson Internet Web servers: workload characterization and performance implications IEEE/ACM Transactions on Networking 5 5 1997 631 645
3. P. Arun Raj Kumar, and S. Selvakumar Distributed denial of service attack detection using an ensemble of neural classifier Computer Communications 34 11 2011 1328 1341
4. R. Beverly, and S. Bauer The spoofer project: inferring the extent of source address filtering on the internet 2005 USENIX SRUTI
5. K.A. Chrysafis, and B.K. Papadopoulos Cost-volume-profit analysis under uncertainty: a model with fuzzy estimators based on confidence intervals International Journal of Production Research 47 21 2009
6. C. Douligeris, and A. Mitrokotsa DDoS attacks and defense mechanisms: classification and state-of-the-art Computer Networks 44 5 2004 643 666
7. L. Feinstein, D. Schnackenberg, R. Balupari, and D. Kindred Statistical approaches to DDoS attack detection and response Proceedings of DARPA Information Survivability Conference and Exposition vol. 1 2003 303 314
8. D. Gavrilis, and E. Dermatas Real-time detection of distributed denial-of-service attacks using RBF networks and statistical features Computer Networks 48 2 2005 235 245
9. G. Goth The Politics of DDoS attacks IEEE Distributed Systems Online 8 2007 art. no. 0708-o8003
10. Gribble, S. and Brewer, E. System design issues for internet middleware services: deductions from a large client trace. In: Proceedings of the USENIX Symposium on Internet Technologies and systems, California; 1997, pp. 207-218.
11. C.A. Guerin, H. Nyberg, O. Perrin, S. Resnick, H. Rootzen, and C. Starica Empirical testing of the infinite source Poisson data traffic model Stochastic Models 19 2 2003 151 200
12. A. Jenik Cyberwar in Estonia and the Middle East Network Security 2009 4 2009 4 6
13. S. Jin, and D. Yeung A covariance analysis model for DDoS attack detection Proc. IEEE International Conference on Communications 2004
14. V. Katos Network intrusion detection: evaluating cluster, discriminant, and logit analysis Information Sciences 177 15 2007 3060 3073
15. A. Lakhina, M. Crovella, and C. Diot Mining anomalies using traffic feature distributions Proceedings of ACM SIGCOMM 2005
16. S. Lee, B. Chung, H. Kim, Y. Lee, C. Park, and H. Yoon Real-time analysis of intrusion detection alerts via correlation Computers & Security 25 3 2006 169 183
17. S.M. Lee, D.S. Kim, J.H. Lee, and J.S. Parka Detection of DDoS attacks using optimized traffic matrix Computers & Mathematics with Applications 2011
18. M. Li, C.H. Chi, W. Jia, W. Zhao, W. Zhou, and J. Cao Decision analysis of statistically detecting distributed denial-of-service flooding attacks International Journal of Information Technology and Decision Making 2 3 2003 397 405
19. L. Li, and G. Lee DDoS attack detection and wavelets Computer Communications and Networks 2003 421 427
20. B. Li, S. Xie, Y. Qu, G. Keung, D. Lin, and J. Liu Inside the new coolstreaming: principles, measurements and performance implications IEEE Infocom 2008
21. M. Li An approach to reliably identifying signs of DDoS flood attacks based on LRD traffic pattern recognition Computers and Security 23 7 2004 549 558
22. Y. Li, L. Guo, Z. Tian, and T. Lu A lightweight web server anomaly detection method based on transductive scheme and genetic algorithms Computer Communications 31 2008 4018 4025
23. J. Mirkovic, and P. Reiher A taxonomy of DDoS attack and DDoS defense mechanisms ACM SIGCOMM Computer Communications Review 34 2 2004 39 54
24. MIT DARPA Intrusion detection evaluation dataset 2000 Available from: http://www.ll.mit.edu/mission/communications/ist/corpora/ideval/data/2000data. html
25. S. Oshima, T. Nakashima, and T. Sueyoshi DDoS detection technique using statistical analysis to generate Quick response time, International Conference on Broadband Wireless Computing, Communication and Applications 2010 672 677
26. Park, C.; Shen, H.; Marron, J.S.; Hernandez-Campos, F.; Veitch, D. Capturing the elusive poissonity in web traffic. In: 14th IEEE International Symposium on modeling, analysis, and Simulation of Computer and Telecommunication systems, 2006. pp. 189-196.
27. A. Patcha, and J.M. Park An overview of anomaly detection techniques: existing solutions and latest technological trends Computer Networks 51 12 2007 3448 3470
28. V. Paxson, and S. Floyd Wide area traffic: the failure of Poisson modeling IEEE/ACM Trans. on Networking 3 3 1995 226 244
29. Ramamoorthi A, Subbulakshmi T, Mercy Shalinie S. Real time detection and classification of DDoS attacks using Enhanced SVM with string kernels, In: IEEE-International Conference on Recent Trends in information Technology; 2011. pp. 91-96.
30. D. Rincón, and S. Sallent On-line segmentation of non-stationary fractal network traffic with wavelet transforms and Log-likelihood-based statistics Lecture Notes in Computer Science 3375 2005 110 123
31. H. Sengar, H. Wang, D. Wijesekera, and S. Jajodia Detecting VoIP floods using the Hellinger distance IEEE Transactions on Parallel and Distributed Systems 19 6 2008 794 805
32. S.N. Shaeles, and I.D. Psaroudakis A study of a botnet creation process and the impact of a DDoS attack against a web server Hakin9 Extra - Botnets 2011 8 12 issue 5
33. Shon T, Kim Y, Lee C, Jongsub M. A machine learning framework for network anomaly detection using SVM and GA, In: Proc. Of Systems, Man and Cybernetics (SMC) Information Assurance Workshop; 2005. pp. 176-183.
34. A. Siraj, R.B. Vaughn, and S.M. Bridges Decision making for network health assessment in an intelligent intrusion detection system architecture International Journal of Information Technology and Decision Making 3 2 2004 281 306
35. J. Tang, Y. Cheng, and C. Zhou Sketch-based SIP flooding detection using Hellinger distance Global Telecommunications Conference GLOBECOM 2009 pp. 1-6
36. L.C. Tsironis, D.S. Sfiris, and B.K. Papadopoulos Fuzzy performance evaluation of workflow stochastic petri nets by means of block reduction IEEE Transactions on Systems Man and Cybernetics Part A - Systems and Humans 40 2 2010 352 362
37. J. Wang, and G. Yang An intelligent method for real-time detection of DDoS attack based on fuzzy logic Journal of Electronics (China) 25 4 2008 511 518
38. H. Wang, D. Zhang, and K. Shin Detecting SYN flooding attacks Proceedings of the IEEE Infocom, New York, NY 2002
39. W. Wei, Y. Dong, D. Lu, and G. Jin Combining cross-correlation and fuzzy classification to detect distributed denial-of-service attacks Lecture Notes in Computer Science, LNCS 3994 2006 57 64
40. Z. Xia, S. Lu, and J. Li Enhancing DDoS flood attack detection via intelligent fuzzy logic Informatica 34 2010 497 507
41. D.S. Yeung, A. Jin, and X. Wang Covariance-matrix modeling and detecting various flooding attacks IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans 37 2 2007
42. S. Yu, W. Zhou, and R. Doss Information theory based detection against network behavior mimicking DDoS attacks IEEE Communications Letters 12 4 2008 318 324