Note on studying change point of LRD traffic based on Li's detection of DDoS flood attacking
Summary: Distributed denial-of-service (DDoS) flood attacks remain great threats to the Internet. To ensure network usability and reliability, accurate detection of these attacks is critical. Based on Li's work on DDoS flood attack detection, we propose a DDoS detection method by monitoring the Hurst variation of long-range dependant traffic. Specifically, we use an autoregressive system to estimate the Hurst parameter of normal traffic. If the actual Hurst parameter varies significantly from the estimation, we assume that DDoS attack happens. Meanwhile, we propose two methods to determine the change point of Hurst parameter that indicates the occurrence of DDoS attacks. The detection rate associated with one method and false alarm rate for the other method are also derived. The test results on DARPA intrusion detection evaluation data show that the proposed approaches can achieve better detection performance than some well-known self-similarity-based detection methods.
- Detection of variations of local irregularity of traffic under DDOS flood attack
- Detecting distributed denial of service attack based on multi-feature fusion
- Distributed detection/localization of change-points in high-dimensional network traffic data
- Real-time detection of application-layer DDoS attack using time series analysis
- DDoS Attack Detection Algorithm Using IP Address Features
- Application of periodized harmonic wavelets towards solution of eigenvalue problems for integral equations
- Detection of variations of local irregularity of traffic under DDOS flood attack
- Fractal time series -- A tutorial review
- scientific article; zbMATH DE number 847242 (Why is no real title available?)
- Mathematical transform of traveling-wave equations and phase aspects of quantum interaction
- Network traffic analysis using singular value decomposition and multiscale transforms
- On the discrete harmonic wavelet transform
- Specific differential equations for generating pulse sequences
- Variance bound of ACF estimation of one block of fGn with LRD
This page was built for publication: Note on studying change point of LRD traffic based on Li's detection of DDoS flood attacking
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q980674)
