期刊
COMPUTERS & SECURITY
卷 31, 期 6, 页码 782-790出版社
ELSEVIER ADVANCED TECHNOLOGY
DOI: 10.1016/j.cose.2012.06.002
关键词
Distributed denial-of-service attacks; Anomaly based intrusion detection; Fuzzy estimators; alpha-cuts; Poisson arrival
资金
- Greek GSRT/CO-OPERATION/SPHINX Project [09SYN-72-419]
We propose a method for DDoS detection by constructing a fuzzy estimator on the mean packet inter arrival times. We divided the problem into two challenges, the first being the actual detection of the DDoS event taking place and the second being the identification of the offending IP addresses. We have imposed strict real time constraints for the first challenge and more relaxed constraints for the identification of addresses. Through empirical evaluation we confirmed that the detection can be completed within improved real time limits and that by using fuzzy estimators instead of crisp statistical descriptors we can avoid the shortcomings posed by assumptions on the model distribution of the traffic. In addition we managed to obtain results under a 3 sec detection window. (C) 2012 Elsevier Ltd. All rights reserved.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据