Feature Selection of Denial-of-Service Attacks Using Entropy and Granular Computing

Arabian Journal for Science and Engineering

Volumn 43, Issue 2, 2018, Pages 499-508

  Khan, Suleman ^a   Gani, Abdullah ^b   Wahab, Ainuddin Wahid Abdul ^b   Singh, Prem Kumar ^c  

^a MONASH UNIVERSITY MALAYSIA   (Malaysia)

^b UNIVERSITY OF MALAYA   (Malaysia)

^c AMITY UNIVERSITY   (India)

Author keywords

DoS attack; Entropy; Intrusion detection systems

Indexed keywords

EID: 85040330254     PISSN: 2193567X     EISSN: 21914281     Source Type: Journal    
DOI: 10.1007/s13369-017-2634-8     Document Type: Article

References (40)

1. Tavallaee, M.; Bagheri, E.; Lu, W.; Ghorbani, A.-A.: A detailed analysis of the KDD CUP 99 data set. In: Proceedings of the Second IEEE Symposium on Computational Intelligence for Security and Defence Applications 2009 (2009)
2. Institute, P.: 2014 Global report on the cost of cyber crime. HP Enterprise Security p. 31 (2014)
3. Yi, M.A.; Phyu, T.: Layering based network intrusion detection system to enhance network attacks detection. Int. J. Sci. Res. 2(9), 10091302 (2013)
4. Xiang, Y.; Li, K.; Zhou, W.: Low-rate DDoS attacks detection and traceback by using new information metrics. IEEE Trans. Inf. Forensics Secur. 6, 426–437 (2011)
5. Khan, S.; Shiraz, M.; Wahab, A.W.A.; Gani, A.; Han, Q.; Rahman, Z.B.A.: A comprehensive review on adaptability of network forensics frameworks for mobile cloud computing. Sci. World J. 2014, 547062 (2014). doi:10.1155/2014/547062
6. Khan, S.; Gani, A.; Wahab, A.W.A.; Shiraz, M.; Ahmad, I.: Network forensics: review, taxonomy, and open challenges. J. Netw. Comput. Appl. 66, 214–235 (2016)
7. Shevtekar, A.; Anantharam, K.; Ansari, N.: Low rate TCP denial-of-service attack detection at edge routers. IEEE Commun. Lett. 9, 363–365 (2005)
8. Khan, S.; Gani, A.; Abdul Wahab A. W.; AminuBagiwa M.: “SIDNFF: source identification network forensics framework for cloud computing. In: Presented at the IEEE International Conference on Consumer Electronics, Taiwan, (2015)
9. Shannon, C.E.: A mathematical theory of communication. ACM SIGMOBILE Mob. Comput. Commun. Rev. 5, 3–55 (2001)
10. Song, X.-D.; Sun, G.-H.; Dong, S.-H.: Shannon information entropy for an infinite circular well. Phys. Lett. A 379, 1402–1408 (2015)
11. Macedo, D.; Guedes, I.: Fisher information and Shannon entropy of position-dependent mass oscillators. Phys. A Stat. Mech. Appl. 434, 211–219 (2015)
12. Zhang, X.; Feng, N.; Wang, Y.; Shen, Y.: Acoustic emission detection of rail defect based on wavelet transform and Shannon entropy. J. Sound Vib. 339, 419–432 (2015)
13. Wu, Y.; Zhou, Y.; Saveriades, G.; Agaian, S.; Noonan, J.P.; Natarajan, P.: Local Shannon entropy measure with statistical tests for image randomness. Inf. Sci. 222, 323–342 (2013)
14. Singh, P.K.; Cherukuri, A.K.; Li, J.: Concepts reduction in formal concept analysis with fuzzy setting using Shannon entropy. Int. J. Mach. Learn. Cybernet. 8(1), 179–189 (2017)
15. Singh, P.K.; Gani, A.: Fuzzy concept lattice reduction using Shannon entropy and Huffman coding. J. Appl. Non-Classical Logics 25(2), 101–119 (2015)
16. Zhou, R.; Cai, R.; Tong, G.: Applications of entropy in finance: a review. Entropy 15, 4909–4931 (2013)
17. Yu, S.; Zhou, W.; Doss, R.; Jia, W.: Traceback of DDoS attacks using entropy variations. IEEE Trans. Parallel Distrib. Syst. 22, 412–425 (2011)
18. Pedrycz, W.; Skowron, A.; Kreinovich, V.: Handbook of Granular Computing. Wiley, New York (2008)
19. Yao, J.T.; Vasilakos, A.V.; Pedrycz, W.: Granular computing: perspectives and challenges. IEEE Trans. Cybernet. 43, 1977–1989 (2013)
20. Pal, S.K.; Meher, S.K.: Paper: natural computing: a problem solving paradigm with granular information processing. Appl. Soft Comput. 13, 3944–3955 (2013)
21. Feinstein, L.; Schnackenberg, D.; Balupari, R.; Kindred, D.: Statistical approaches to DDoS attack detection and response. In: DARPA Information Survivability Conference and Exposition, 2003. Proceedings, pp. 303–314 (2003)
22. Li, Y.; Fang, B.-X.; Chen, Y.; Guo, L.: A lightweight intrusion detection model based on feature selection and maximum entropy model. In: International Conference on Communication Technology ICCT’06. 2006, pp. 1–4 (2006)
23. Lee, T.-H.; He, J.-D.: Entropy-based profiling of network traffic for detection of security attack. In: TENCON 2009-2009 IEEE Region 10 Conference, pp. 1–5 (2009)
24. Zi, L.; Yearwood, J.; Wu, X.-W.: Adaptive clustering with feature ranking for DDoS attacks detection. In: 4th International Conference on Network and System Security (NSS), 2010, pp. 281–286 (2010)
25. Sqalli, M.H.; Firdous, S.N.; Baig, Z.; Azzedin, F.: An entropy and volume-based approach for identifying malicious activities in honeynet traffic. In: International Conference on Cyberworlds (CW). 2011, pp. 23–30 (2011)
26. Om, H.; Kundu, A.: A hybrid system for reducing the false alarm rate of anomaly intrusion detection system. In: 2012 1st International Conference on Recent Advances in Information Technology (RAIT), pp. 131–136 (2012)
27. Han, L.: Research of K-means algorithm based on information Entropy in anomaly detection. In: Fourth International Conference on Multimedia Information Networking and Security (MINES), 2012, pp. 71–74 (2012)
28. Qazanfari, K.; Mirpouryan, M. S.; Gharaee, H.: A novel hybrid anomaly based intrusion detection method. In: 2012 Sixth International Symposium on Telecommunications (IST), pp. 942–947 (2012)
29. Li, H.; Wu, Q.: Research of clustering algorithm based on information entropy and frequency sensitive discrepancy metric in anomaly detection. In: International Conference on Information Science and Cloud Computing Companion (ISCC-C), 2013, pp. 799–805 (2013)
30. Luo, Y.; Wang, B.; Sun, Y.; Zhang, B.; Chen, X.: FL-LPVG: an approach for anomaly detection based on flow-level limited penetrable visibility graph. In: International Conference on Information and Network Security, ICINS 2013, Beijing. pp. 1–7 (2013). doi:10.1049/cp.2013.2470
31. Kaur, G.; Varma, S.; Jain, A.: “A novel statistical technique for detection of DDoS attacks in KDDdataset,” In: Contemporary Computing (IC3). Sixth International Conference on 2013, 393–398 (2013)
32. Priyanka, N.; Mishra, A.; et al.: Enhanced CBF packet filtering method to detect DDoS attack in cloud computing environment. IJCSI Int. J. Comput. Sci. Issues 10(2), 142–146 (2013)
33. Gupta, B.B.; Misra, M.; Joshi, R.C.: FVBA: a combined statistical approach for low rate degrading and high bandwidth disruptive DDoS attacks detection in ISP domain. In: 16th IEEE International Conference on Networks, 2008, ICON 2008, IEEE (2008)
34. Chhabra, M.; et al.: A novel solution to handle DDOS attack in MANET. J. Inf. Secur. 4(3), 153–165 (2013)
35. Chhabra, M.; Gupta, B.B.: An efficient scheme to prevent DDoS flooding attacks in mobile ad-hoc network (MANET). Res. J. Appl. Sci. Eng. Technol. 7(10), 2033–2039 (2014)
36. Gupta, B.B.: An introduction to DDoS attacks and defense mechanisms: an analyst’s handbook. Lap Lambert Academic Publications, Saarbrücken (2011)
37. Gupta, B.B.; Badve, O.P.: Taxonomy of DoS and DDoS attacks and desirable defense mechanism in a cloud computing environment. Neural Comput. Appl. (2016). doi:10.1007/s00521-016-2317-5
38. Singh, P.K.; Kumar, C.A.: Concept lattice reduction using difference subset of attributes as information granules. Granul. Comput. (2017). doi:10.1007/s41066-016-0036-z
39. Singh, P.K.: Complex vague set based concept lattice. Chaos Solitons Fractals 96, 145–153 (2017)
40. Singh, P.K.: Three-way fuzzy concept lattice representation using neutrosophic set. Int. J. Mach. Learn. Cybernet. 8(1), 69–79 (2017)