A system for denial-of-service attack detection based on multivariate correlation analysis

IEEE Transactions on Parallel and Distributed Systems

Volumn 25, Issue 2, 2014, Pages 447-456

  Tan, Zhiyuan ^a   Jamdagni, Aruna ^b   He, Xiangjian ^a   Nanda, Priyadarsi ^a   Liu, Ren Ping ^c  

^a UNIVERSITY OF TECHNOLOGY SYDNEY   (Australia)

^b UNIVERSITY OF WESTERN SYDNEY   (Australia)

^c CSIRO   (Australia)

Author keywords

Denial of service attack; multivariate correlations; network traffic characterization; triangle area

Indexed keywords

ANOMALY BASED DETECTION; DATA-BASE SERVERS; DENIAL OF SERVICE ATTACKS; DETECTION ACCURACY; MULTIVARIATE CORRELATION; NETWORK TRAFFIC CHARACTERIZATIONS; STATE-OF-THE-ART APPROACH; TRIANGLE AREAS;

COMPUTER CRIME; COMPUTER SYSTEMS; CORRELATION METHODS;

SECURITY OF DATA;

EID: 84891816613     PISSN: 10459219     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPDS.2013.146     Document Type: Article

References (22)

1. V. Paxson, Bro: A System for Detecting Network Intruders in Real-Time, Computer Networks, vol. 31, pp. 2435-2463, 1999.
2. P. Garca-Teodoro, J. Daz-Verdejo, G. Maci-Fernndez, and E. Vzquez, Anomaly-Based Network Intrusion Detection: Techniques, Systems and Challenges, Computers and Security, vol. 28, pp. 18-28, 2009.
3. D.E. Denning, An Intrusion-Detection Model, IEEE Trans. Software Eng., vol. TSE-13, no. 2, pp. 222-232, Feb. 1987.
4. K. Lee, J. Kim, K.H. Kwon, Y. Han, and S. Kim, DDoS Attack Detection Method Using Cluster Analysis, Expert Systems with Applications, vol. 34, no. 3, pp. 1659-1665, 2008. (Pubitemid 350298194)
5. A. Tajbakhsh, M. Rahmati, and A. Mirzaei, Intrusion Detection Using Fuzzy Association Rules, Applied Soft Computing, vol. 9, no. 2, pp. 462-469, 2009.
6. J. Yu, H. Lee, M.-S. Kim, and D. Park, Traffic Flooding Attack Detection with SNMP MIB Using SVM, Computer Comm., vol. 31, no. 17, pp. 4212-4219, 2008.
7. W. Hu, W. Hu, and S. Maybank, AdaBoost-Based Algorithm for Network Intrusion Detection, IEEE Trans. Systems, Man, and Cybernetics Part B, vol. 38, no. 2, pp. 577-583, Apr. 2008. (Pubitemid 351484757)
8. C. Yu, H. Kai, and K. Wei-Shinn, Collaborative Detection of DDoS Attacks over Multiple Network Domains, IEEE Trans. Parallel and Distributed Systems, vol. 18, no. 12, pp. 1649-1662, Dec. 2007.
9. G. Thatte, U. Mitra, and J. Heidemann, Parametric Methods for Anomaly Detection in Aggregate Traffic, IEEE/ACM Trans. Networking, vol. 19, no. 2, pp. 512-525, Apr. 2011.
10. S.T. Sarasamma, Q.A. Zhu, and J. Huff, Hierarchical Kohonenen Net for Anomaly Detection in Network Security, IEEE Trans. Systems, Man, and Cybernetics, Part B: Cybernetics, vol. 35, no. 2, pp. 302-312, Apr. 2005. (Pubitemid 40535913)
11. S. Yu, W. Zhou, W. Jia, S. Guo, Y. Xiang, and F. Tang, Discriminating DDoS Attacks from Flash Crowds Using Flow Correlation Coefficient, IEEE Trans. Parallel and Distributed Systems, vol. 23, no. 6, pp. 1073-1080, June 2012.
12. S. Jin, D.S. Yeung, and X. Wang, Network Intrusion Detection in Covariance Feature Space, Pattern Recognition, vol. 40, pp. 2185-2197, 2007. (Pubitemid 46574766)
13. C.F. Tsai and C.Y. Lin, A Triangle Area Based Nearest Neighbors Approach to Intrusion Detection, Pattern Recognition, vol. 43, pp. 222-229, 2010.
14. A. Jamdagni, Z. Tan, X. He, P. Nanda, and R.P. Liu, RePIDS: A Multi Tier Real-Time Payload-Based Intrusion Detection System, Computer Networks, vol. 57, pp. 811-824, 2013.
15. Z. Tan, A. Jamdagni, X. He, P. Nanda, and R.P. Liu, Denial-of-Service Attack Detection Based on Multivariate Correlation Analysis, Proc. Conf. Neural Information Processing, pp. 756-765, 2011.
16. Z. Tan, A. Jamdagni, X. He, P. Nanda, and R.P. Liu, Triangle-Area-Based Multivariate Correlation Analysis for Effective Denialof-Service Attack Detection, Proc. IEEE 11th Int'l Conf. Trust, Security and Privacy in Computing and Comm., pp. 33-40, 2012.
17. S.J. Stolfo, W. Fan, W. Lee, A. Prodromidis, and P.K. Chan, Cost-Based Modeling for Fraud and Intrusion Detection: Results from the JAM Project, Proc. DARPA Information Survivability Conf. and Exposition (DISCEX '00), vol. 2, pp. 130-144, 2000.
18. G.V. Moustakides, Quickest Detection of Abrupt Changes for a Class of random Processes, IEEE Trans. Information Theory, vol. 44, no. 5, pp. 1965-1968, Sept. 1998. (Pubitemid 128738566)
19. A.A. Cardenas, J.S. Baras, and V. Ramezani, Distributed Change Detection for Worms, DDoS and Other Network Attacks, Proc. The Am. Control Conf., vol. 2, pp. 1008-1013, 2004.
20. W. Wang, X. Zhang, S. Gombault, and S.J. Knapskog, Attribute Normalization in Network Intrusion Detection, Proc. 10th Int'l Symp. Pervasive Systems, Algorithms, and Networks (ISPAN), pp. 448-453, 2009.
21. M. Tavallaee, E. Bagheri, L. Wei, and A.A. Ghorbani, A Detailed Analysis of the KDD Cup 99 Data Set, Proc. IEEE Second Int'l Conf. Computational Intelligence for Security and Defense Applications, pp. 1-6, 2009.
22. D.E. Knuth, The Art of Computer Programming Vol I: Fundamental Algorithms. Addison-Wesley, 1973.