Information metrics for low-rate DDoS attack detection: A comparative evaluation

2014 7th International Conference on Contemporary Computing, IC3 2014

Volumn , Issue , 2014, Pages 80-84

  Bhuyan, Monowar H ^a   Bhattacharyya, D K ^b   Kalita, J K ^c  

^a KAZIRANGA UNIVERSITY   (India)

^b TEZPUR UNIVERSITY   (India)

^c University of Colorado Colorado Springs   (United States)

Author keywords

DDoS attack; entropy; information metric; low rate; network traffic

Indexed keywords

COMPUTATION THEORY; ENTROPY; HIGH SPEED NETWORKS; INFORMATION THEORY; NETWORK SECURITY; PROBABILITY DISTRIBUTIONS;

COMPARATIVE EVALUATIONS; DDOS ATTACK; DISTRIBUTED DENIAL OF SERVICE; GENERALIZED ENTROPIES; INFORMATION METRICS; LINCOLN LABORATORY; MALICIOUS TRAFFIC; NETWORK TRAFFIC;

DENIAL-OF-SERVICE ATTACK;

EID: 84908638568     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IC3.2014.6897151     Document Type: Conference Paper

References (15)

1. W. Wei, F. Chen, Y. Xia, and G. Jin, "A Rank Correlation Based Detection against Distributed Reflection DoS Attacks," IEEE Communications Letters, vol. 17, no. 1, pp. 173-175, 2013
2. M. H. Bhuyan, H. J. Kashyap, D. K. Bhattacharyya, and J. K. Kalita, "Detecting Distributed Denial of Service Attacks: Methods, Tools and Future Directions," The Computer Journal, vol. 57, no. 4, pp. 537-556, 2014
3. S. Yu, W. Zhou, R. Doss, and W. Jia, "Traceback of DDoS Attacks Using Entropy Variations," IEEE Trans. Parallel Distributed Systems, vol. 22, no. 3, pp. 412-425, March 2011
4. Y. Xiang, K. Li, and W. Zhou, "Low-Rate DDoS Attacks Detection and Traceback by Using New Information Metrics," IEEE Transactions on Information Forensics and Security, vol. 6, no. 2, pp. 426-437, 2011
5. Z. Sheng, Z. Qifei, P. Xuezeng, and Z. Xuhui, "Detection of Low-rate DDoS Attack Based on Self-Similarity," in 2nd International Workshop on Education Technology and Computer Science (ETCS), vol. 1, March 2010, pp. 333-336
6. C. Zhang, Z. Cai, W. Chen, X. Luo, and J. Yin, "Flow Level Detection and Filtering of Low-rate DDoS," Comput. Netw., vol. 56, no. 15, pp. 3417-3431, October 2012
7. Y. Tao and S. Yu, "DDoS Attack Detection at Local Area Networks Using Information Theoretical Metrics," in 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2013, pp. 233-240
8. J. Francois, I. Aib, and R. Boutaba, "FireCol: A Collaborative Protection Network for the Detection of Flooding DDoS Attacks," IEEE/ACM Transactions on Networking, vol. 20, no. 6, pp. 1828-1841, 2012
9. A. Renyi, "On Measures of Entropy And Information," in Proc. of the 4th Berkeley Symposium on Mathematics, Statistics and Probability, 1960, pp. 547-561
10. C. E. Shannon, "A Mathematical Theory of Communication," Bell system technical journal, vol. 27, pp. 397-423, 1948
11. M. H. Bhuyan, D. K. Bhattacharyya, and J. K. Kalita, "AOCD: An Adaptive Outlier Based Coordinated Scan Detection Approach," International Journal of Network Security, vol. 14, no. 6, pp. 339-351, 2012
12. "Network Anomaly Detection: Methods, Systems and Tools," IEEE Communications Surveys Tutorials, vol. 16, no. 1, pp. 303-336, 2014
13. MIT Lincoln Laboratory Datasets, "MIT LLS DDOS 0.2.2," http://www.ll.mit.edu/mission/communications/cyber/CSTcorpora/ ideval/data/2000data.html, 2000, Massachusetts Institute of Technology, Cambridge,MA
14. CAIDA, "The Cooperative Analysis for Internet Data Analysis," http://www.caida.org, 2011
15. D. Moore, C. Shannon, D. J. Brown, G. M. Voelker, and S. Savage, "Inferring Internet Denial-of-service Activity," ACM Trans. Computer System, vol. 24, no. 2, pp. 115-139, May 2006.