DDoS flooding attack detection scheme based on F-divergence

2012 ◽  
Vol 35 (11) ◽  
pp. 1380-1391 ◽  
Author(s):  
Hamza Rahmani ◽  
Nabil Sahli ◽  
Farouk Kamoun
Keyword(s):  
Attack Detection ◽  
Detection Scheme ◽  
Flooding Attack

scholarly journals Traceroute-based target link flooding attack detection scheme by analyzing hop count to the destination

2019 ◽  
Vol 8 (7) ◽  
pp. 251-256
Author(s):  
Hiromu Asahina ◽  
Kei Sakuma ◽  
Shuichiro Haruta ◽  
Hiroya Kato ◽  
Iwao Sasase
Keyword(s):  
Attack Detection ◽  
Hop Count ◽  
Detection Scheme ◽  
Flooding Attack

scholarly journals A cooperative DDoS attack detection scheme based on entropy and ensemble learning in SDN

2021 ◽  
Vol 2021 (1) ◽  
Author(s):  
Shanshan Yu ◽  
Jicheng Zhang ◽  
Ju Liu ◽  
Xiaoqing Zhang ◽  
Yafeng Li ◽  
...  
Keyword(s):  
Ensemble Learning ◽  
Denial Of Service ◽  
Attack Detection ◽  
Coarse Grained ◽  
Communication Overhead ◽  
Detection Scheme ◽  
Fine Grained ◽  
Ddos Attack ◽  
Network Status ◽  
Ddos Attack Detection

AbstractIn order to solve the problem of distributed denial of service (DDoS) attack detection in software-defined network, we proposed a cooperative DDoS attack detection scheme based on entropy and ensemble learning. This method sets up a coarse-grained preliminary detection module based on entropy in the edge switch to monitor the network status in real time and report to the controller if any abnormality is found. Simultaneously, a fine-grained precise attack detection module is designed in the controller, and a ensemble learning-based algorithm is utilized to further identify abnormal traffic accurately. In this framework, the idle computing capability of edge switches is fully utilized with the design idea of edge computing to offload part of the detection task from the control plane to the data plane innovatively. Simulation results of two common DDoS attack methods, ICMP and SYN, show that the system can effectively detect DDoS attacks and greatly reduce the southbound communication overhead and the burden of the controller as well as the detection delay of the attacks.

scholarly journals Design and Implementation of an SNMP-Based Traffic Flooding Attack Detection System

2009 ◽  
Vol 16C (1) ◽  
pp. 13-20 ◽  
Author(s):  
Jun-Sang Park ◽  
Sung-Yun Kim ◽  
Dai-Hee Park ◽  
Mi-Jung Choi ◽  
Myung-Sup Kim
Keyword(s):  
Detection System ◽  
Attack Detection ◽  
Flooding Attack ◽  
Design And Implementation

Traffic Classification Features and its Application in DDoS Detection

2013 ◽  
Vol 380-384 ◽  
pp. 2673-2676
Author(s):  
Ze Yu Xiong
Keyword(s):  
Detection Method ◽  
Single Point ◽  
Attack Detection ◽  
Traffic Classification ◽  
Ddos Attacks ◽  
Detection Scheme ◽  
Ddos Detection ◽  
Point Detection ◽  
Ddos Attack Detection ◽  
Collaborative Detection

DDoS attacks have relatively low proportion of normal flow in the boundary network at the attack traffic,In this paper,we establish DDoS attack detection method based on defense stage and defensive position, and design and implement collaborative detection of DDoS attacks. Simulation results show that our approach has good timeliness, accuracy and scalability than the single-point detection and route-based distributed detection scheme.

Sign in / Sign up

Export Citation Format

Share Document