论文信息 - Detection of Low-rate DDoS Attack Based on Self-Similarity

Detection of Low-rate DDoS Attack Based on Self-Similarity

Distributed Denial-of-Service (DDos) attack is one of the high threats to the Internet. This paper proposes a measure based on Hurst coefficient to detect DDoS on Low-rate. The result of experiments shows that the measure can detect the DDoS intrusion hided in the normal data traffic in real time.

Zhang Qifei | Zhang Sheng | Zhu Xuhui | Pan Xuezeng

[1] Sally Floyd,et al. Wide area traffic: the failure of Poisson modeling , 1995, TNET.

[2] Yin Xin-chun. A real-time DDoS attacks detection method based on entropy , 2009 .

[3] Sally Floyd,et al. Wide-area traffic: the failure of Poisson modeling , 1994 .

[4] B. B. Gupta,et al. An efficient analytical solution to thwart DDoS attacks in public domain , 2009, ICAC3 '09.

[5] Walter Willinger,et al. On the self-similar nature of Ethernet traffic , 1993, SIGCOMM '93.

[6] KesidisGeorge,et al. Denial-of-Service Attack-Detection Techniques , 2006 .

[7] Walter Willinger,et al. Self-similarity through high-variability: statistical analysis of Ethernet LAN traffic at the source level , 1997, TNET.

[8] Kotagiri Ramamohanarao,et al. Survey of network-based defense mechanisms countering the DoS and DDoS problems , 2007, CSUR.

[9] George Kesidis,et al. Denial-of-service attack-detection techniques , 2006, IEEE Internet Computing.

[10] Jia Zhen. Performance analysis of seven estimate algorithms about the Hurst coefficient , 2006 .

[11] Walter Willinger,et al. Self-similarity through high-variability: statistical analysis of Ethernet LAN traffic at the source level , 1997, TNET.