scholarly journals CCID: Cross-Correlation Identity Distinction Method for Detecting Shrew DDoS

2019 ◽  
Vol 2019 ◽  
pp. 1-9 ◽  
Author(s):  
Cheng Huang ◽  
Ping Yi ◽  
Futai Zou ◽  
Yao Yao ◽  
Wei Wang ◽  
...  

This study presents a new method for detecting Shrew DDoS (Distributed Denial of Service) attacks and analyzes the characteristics of the Shrew DDoS attack. Shrew DDoS is periodic to be suitable for the server’s TCP (Transmission Control Protocol) timer. It has lower maximum to bypass peak detection. This periodicity makes it distinguishable from normal data packets. By proposing the CCID (Cross-Correlation Identity Distinction) method to distinguish the flow properties, it quantifies the difference between a normal flow and an attack flow. Simultaneously, we calculated the cross-correlation between the attack flow and the normal flow in three different situations. The server can use its own TCP flow timer to construct a periodic attack flow. The cross-correlation between Gaussian white noise and simulated attack flow is less than 0.3. The cross-correlation between single-door function and simulated attack flow is 0.28. The cross-correlation between actual attack flow and simulated attack flow is more than 0.8. This shows that we can quantitatively distinguish the attack effects of different signals. By testing 4 million data, we can prove that it has a certain effect in practice.

1975 ◽  
Vol 12 (1) ◽  
pp. 180-182
Author(s):  
Jay C. Hardin ◽  
Thomas J. Brown

Theoretical expressions for the cross correlation and cross spectra of the input and output variables in the difference equation Xt=aXt−1 + bXt−2+ Yt are derived. These expressions are compared with estimates of these expectations obtained by employing a Fast Fourier Transform technique on digitally generated series.


Author(s):  
Zhikun Hou ◽  
Yunshen Zhou ◽  
Mikhail F. Dimentberg ◽  
Mohammad N. Noori

Abstract The paper addresses non-Gaussian stationary response of linear single-degree-of-freedom (SDOF) systems subject to a periodic excitation with correlated random amplitude and phase disturbances which are modeled as correlated Gaussian white noise processes. Correlation between amplitude and phase modulation is specified by the cross-correlation coefficient. Numerical results for the second and fourth moment responses are presented. The probability density function of the response is calculated based on the cumulant-neglect closure method. Non-Gaussianity of the response is discussed in terms of the excess factor. The results show that the moment responses generally increase with larger random amplitude disturbance and decrease with larger random phase modulation. The cross-correlation between amplitude and phase disturbances tend to reduce the system moment response. Large relative detuning results in smaller system moment responses. The response may become Gaussian in the sense of up to the fourth moment for sufficiently large relative detuning or random phase disturbances.


2014 ◽  
Vol 13 (03) ◽  
pp. 1450023 ◽  
Author(s):  
Yi Yin ◽  
Pengjian Shang

In this paper, we employ multiscale cross-sample entropy (MSCE), multiscale detrended cross-correlation analysis (MSDCCA) and DCCA cross-correlation coefficient (σDCCA) measurement to investigate the relationship between time series among different stock markets. We report the results of synchronism and cross-correlation behaviors in US and Chinese stock markets by these three methods. It can be concluded that the MSCE analysis point out the similarity on the cross-correlation among the stock markets while the MSCE makes it difficult to distinguish the indices in the same region and identify the difference and uniqueness of stock markets. However, both the MSDCCA analysis and σDCCA analysis reflect the similarity and uniqueness on the cross-correlation behaviors and reach the consistency. Furthermore, MSDCCA gives detailed multiscale cross-correlation structures and show some new interesting characteristics and conclusions, while the multiscale analysis by σDCCA provides a large amount of information on the cross-correlations and quantifies the level of cross-correlation more clearly and intuitively. MSDCCA and σDCCA methods may be more proper measures for the investigation of the cross-correlation between time series. We believe that such researches are relevant for a better understanding of the stock market mechanisms, and may lead to a better forecasting of the stock indices.


2021 ◽  
Vol 2021 (1) ◽  
Author(s):  
M.G. Dembelov ◽  

A comparison was carried out of the values of the total zenith tropospheric delay (ZTD) revealed from the observations of the GPS satellite navigation system and measurements by a microwave radiometer of water vapor (MRWV) at the BADG permanent measurement point located on the territory of the “Badary” Observatory of the Institute of Applied Astronomy of the Russian Academy of Sciences. GPS antenna, MRWV device and meteorological station are located in close proximity to each other. This significantly affected the accuracy of the processed data. The differences in the values of the total zenith tropospheric delay obtained from GPS observations and measurements with a microwave radiometer of water vapor are analyzed in terms of mean and standard deviations and the coefficient of cross-correlation. Comparison of the results for 2020 year showed very good agreement. In summer, the BIAS of the difference between the ZTD data from GPS and MRWV observations is about 0.63% of the average summer ZTD value, the cross-correlation coefficient between the data is K = 0.85. In winter, the BIAS of the difference was about 0.21% of the average winter value of ZTD, the cross-correlation coefficient between the data is about K = 0.93. A high degree of reliability of data on ZTD and tropospheric moisture content obtained by continuous GPS measurements is shown.


1975 ◽  
Vol 12 (01) ◽  
pp. 180-182
Author(s):  
Jay C. Hardin ◽  
Thomas J. Brown

Theoretical expressions for the cross correlation and cross spectra of the input and output variables in the difference equation Xt =aXt −1 + bXt− 2 + Yt are derived. These expressions are compared with estimates of these expectations obtained by employing a Fast Fourier Transform technique on digitally generated series.


2016 ◽  
Vol 30 (05) ◽  
pp. 1650035 ◽  
Author(s):  
N. H. Abdel-Wahab ◽  
Lamia E. Thabet

In this paper, some properties through the moving four-level [Formula: see text]-type atom interacting with a two-mode radiation field are presented. We study this system in the presence of the nonlinearity. The exact solution of this model is given by using the Schrödinger equation when the atom and the field are initially in an excited state and a squeezed state, respectively. We employed the results to perform a careful investigation of the temporal evolution of the cross-correlation function, the momentum increment, the difference mean photon numbers and the normal squeezing. The influence of the Kerr and the cross-Kerr medium parameters on these aspects is examined. It is found that the atom-field properties are affected by the changing of these parameters.


Sign in / Sign up

Export Citation Format

Share Document