Next generation application-layer ddos defences: Applying the concepts of outlier detection in data streams with concept drift

Proceedings - 2014 13th International Conference on Machine Learning and Applications, ICMLA 2014

Volumn , Issue , 2014, Pages 456-462

  Stevanovic, Dusan ^a   Vlajic, Natalija ^a  

^a YORK UNIVERSITY   (Canada)

Author keywords

application layer DDoS; data stream with concept drift; dynamic Web domain; intrusion detection amp; defence; outlier detection; simulation

Indexed keywords

ARTIFICIAL INTELLIGENCE; DATA COMMUNICATION SYSTEMS; DATA HANDLING; DENIAL-OF-SERVICE ATTACK; HTTP; INTRUSION DETECTION; LEARNING SYSTEMS; SOCIAL NETWORKING (ONLINE); STATISTICS; WEBSITES; WORLD WIDE WEB;

APPLICATION LAYERS; CONCEPT DRIFTS; OUTLIER DETECTION; SIMULATION; WEB DOMAINS;

DATA MINING;

EID: 84946685423     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICMLA.2014.80     Document Type: Conference Paper

References (24)

1. H. Obendorf, H. Weinreich, E. Herder, and M. Mayer, "Web Page Revisitation Revisited: Implications of a Long-term Click-stream Study of Browser Usage," in In proceedings of CHI '07, San Jose, California, USA, 2007, pp. 597-606.
2. R. Kumar and A. Tomkins, "A Characterization of Online Browsing Behavior," in World Wide Web, Raleigh, North Carolina, USA, 2010, pp. 561-570.
3. J. Lewis. (2012, Aug.) Forbes.com. [Online]. http://www.forbes.com/sites/ciocentral/2012/05/08/figuring-ddos-attackrisks-into-it-security-budgets/
4. "The Growing Threat of Application-Layer DDoS Attacks," Arbor Networks Whitepaper, 2012. [Online]. Arbor Networks, "The Growing Threat of Application-Layer DDoS Attacks", Whitepaper, 2012.
5. W. O. Chee. (2010, Nov.) OWASP. [Online]. https://www.owasp.org/images/4/43/Layer-7-DDOS.pdf
6. (2012, May) User-agent-string.info. [Online]. http://user-agentstring. info/
7. D. Stevanovic, N. Vlajic, and A. An, "Detection of Malicious and Nonmalicious Website Visitors Using Unsupervised Neural Network Learning," Applied Soft Computing, vol. 13, no. 1, pp. 698-708, Jan. 2013.
8. J. Idziorek and M. Tannian, "Exploiting Cloud Utility Models for Profit and Ruin," in IEEE 4th International Conference on Cloud Computing, Washington, DC, 2011, pp. 33-40.
9. J. Idziorek, M. Tannian, and D. Jacobson, "Attribution of Fraudulent Resource Consumption in the Cloud," in IEEE Fifth International Conference on Cloud Computing, Honolulu, Hawaii, 2012, pp. 99-106.
10. M. Rijke, "Evading DDoS detection with mimicry attacks," in 17th Twente Student Conference on IT, Enschede, Netherlands, 2012.
11. A. Bifet, "Adaptive learning and mining for data streams and frequent patterns," PhD Thesis, Universitat Politecnica de Catalunya, 2009.
12. M. Bolanos, J. Forrest, and M. Hahsler, "Introduction to stream: An extensible Framework for Data Stream Clustering Research with R," in , 2011, pp. 1-33.
13. M. Kontaki, A. Gounaris, A. N. Papadopoulos, K. Tsichlas, and Y. Manolopoulos, "Continuous monitoring of distance-based outliers over data streams," in The IEEE International Conference on Data Engineering (ICDE), Hannover, Germany, 2011, pp. 135-146.
14. D. Pokrajac, A. Lazarevic, and L. J. Latecki, "Incremental Local Outlier Detection for Data Streams," in IEEE Symposium on Computational Intelligence and Data Mining (CIDM), Honolulu, Hawaii, USA, 2007, pp. 504-515.
15. F. Cao, M. Ester, W. Qian, and A. Zhou, "Density-based clustering over an evolving data stream with noise," in In Proceedings of the 6th SIAM International Conference on Data Mining, Bethesda, Maryland, USA, 2006, pp. 328-339.
16. Y. Chen and L. Tu, "Density-based clustering for real-ime stream data," in KDD'07, New York, NY, 2007, pp. 133-142.
17. A. Amini, T. Y. Wah, and H. Saboohi, "On Density-Based Data Streams Clustering Algorithms: A Survey," Computer Science and Technology, vol. 29, no. 1, pp. 116-141, Jan. 2014.
18. K. Sequeira and M. Zaki, "ADMIT: anomaly-based data mining for intrusions," in In Proceedings of the eighth ACM SIGKDD international conference on Knowledge discovery and data mining, New York, NY, 2002, pp. 386-395.
19. V. Chandola, V. Mithal, and V. Kumar, "Comparative Evaluation of Anomaly Detection Techniques for Sequence Data ," in In Proceedings of the 8th IEEE International Conference on Data Mining, Pisa, Italy, 2008, pp. 743-748.
20. S. Budalakoti, A. Srivastava, R. Akella, and E. Turkov, "Anomaly detection in large sets of high-dimensional symbol sequences," NASA Ames Research Center, Technical Report . NASA TM-2006-2145, 2006.
21. A. Bifet, G. Holmes, R. Kirkby, and B. Pfahringer, "MOA: Massive Online Analysis," Journal of Machine Learning Research, vol. 11, pp. 1601-1604, Apr. 2010.
22. S. Deng, "Empirical model of WWW document arrivals at access link ," in IEEE International Conference on Converging Technologies for Tomorrow's Applications, Dallas, Texas, 1996, pp. 1797-1802.
23. D. Drinfeld and N. Vlajic, "Smart Crawlers for Flash-Crowd DDoS: The Attacker's Perspective," in IEEE World Congress on Internet Security, Guelph, Canada, 2012, pp. 37-44.
24. H. P. Kriegel, P. Krer, E. Schubert, and A. Zimek, "LoOP: Local Outlier Probabilities," in In the Proceedings of the 18th ACM conference on Information and knowledge management, 2009, p. 1649-1652.