Detecting distributed denial-of-service attacks based on statistical analysis

Computer Engineering and Applications ›› 2007, Vol. 43 ›› Issue (33): 167-169.

• 网络、通信与安全 • Previous Articles Next Articles

Detecting distributed denial-of-service attacks based on statistical analysis

WU Qing-tao¹,ZHANG Chun-yang¹,SHAO Zhi-qing²,LIU Bai-xiang²

1.Electronic Information Engineering College,Henan University of Science and Technology,Luoyang,Henan 471003,China
2.Department of Computer Science & Engineering,East China University of Science & Technology,Shanghai 200237,China

Received:1900-01-01 Revised:1900-01-01 Online:2007-11-21 Published:2007-11-21
Contact: WU Qing-tao

基于统计分析的DDoS攻击检测

吴庆涛¹,张春阳¹,邵志清²,刘百祥²

1.河南科技大学电子信息工程学院,河南洛阳 471003
2.华东理工大学计算机科学与工程系,上海 200237

通讯作者: 吴庆涛

Abstract

Abstract: Distributed Denial of service（DDoS） attacks are a major threat to security of computer network.This paper analyzes DDoS attack scenario and attack signature.Then,a novel scheme for early detection of DDoS attacks is proposed,which uses the probability distributions of normal behavior based on statistical character of IP connections on the computer network.The experimental results show the effectiveness of our scheme in early detecting DDoS attacks.Also,this scheme can be applied to other network security detection research.

Key words: Distributed Denial of Service, statistical analysis, attack detection

摘要： 分析了分布式拒绝服务（Distributed Denial of Service,DDoS）攻击原理及其攻击特征,从提高检测响应时间和减少计算复杂性的角度提出了一种新的DDoS攻击检测方法。该方法基于DDoS攻击的固有特性,从IP连接数据的统计分析中寻找能够描述系统正常行为的分布规律,建立基于统计分析的DDoS攻击检测模型。实验结果表明,该方法能快速有效地实现对DDoS攻击的检测,并对其他网络安全检测具有指导作用。

关键词: 分布式拒绝服务, 统计分析, 攻击检测

WU Qing-tao¹,ZHANG Chun-yang¹,SHAO Zhi-qing²,LIU Bai-xiang². Detecting distributed denial-of-service attacks based on statistical analysis[J]. Computer Engineering and Applications, 2007, 43(33): 167-169.

吴庆涛¹,张春阳¹,邵志清²,刘百祥². 基于统计分析的DDoS攻击检测[J]. 计算机工程与应用, 2007, 43(33): 167-169.

[1]	JIANG Kui, QIU Yuandong, ZHENG Haocheng. ICMPv6 DDoS Attack Detection Method Based on Information Entropy and LSTM [J]. Computer Engineering and Applications, 2021, 57(21): 148-154.
[2]	WANG Wentao, LI Shumei, TANG Jie, LYU Weilong. DDoS Attack Detection Method Based on Probability Graph Model and DNN [J]. Computer Engineering and Applications, 2021, 57(13): 108-115.
[3]	MENG Yuan, TU Shanshan, YU Jinliang. Detection Scheme of Impersonation Attack Based on DQL Algorithm in Fog Computing [J]. Computer Engineering and Applications, 2020, 56(10): 63-68.
[4]	CHU Hanting1, XING Xing1，2, MENG Zhixin1, JIA Zhichun1. Analysis for National Natural Science Foundation of China Funded Projects on Recommender System Research Area [J]. Computer Engineering and Applications, 2019, 55(9): 259-263.
[5]	LIU Qilie, LI Jianxiong. Multiple Parameter Detection Algorithm of Cache Pollution Attack in Content Centric Networking [J]. Computer Engineering and Applications, 2019, 55(4): 130-136.
[6]	JING Hongfei, ZHANG Kun, CAI Bing, YU Longhua. Detection of Application Layer DDoS Based on BP Neural Network [J]. Computer Engineering and Applications, 2019, 55(20): 73-79.
[7]	LIU Junjie, WANG Jun, WANG Menglin, WANG Yue. DDoS Attack Detection Based on C4.5 in SDN [J]. Computer Engineering and Applications, 2019, 55(20): 84-88.
[8]	HAO Yaojun1，2, ZHANG Fuzhi2. Ensemble Detection Method for Shilling Attacks Based on Deep Sparse Autoencoder [J]. Computer Engineering and Applications, 2019, 55(1): 9-22.
[9]	YANG Haopu, WANG Kun. Phase-based classification and evaluation of APT attack behaviors [J]. Computer Engineering and Applications, 2017, 53(22): 97-104.
[10]	FENG Bo1, GUO Fan2, TAN Suwen3. Attack source traceback scheme based on probabilistic packet marking for IPv6 network [J]. Computer Engineering and Applications, 2016, 52(6): 102-106.
[11]	SUN Jian, LIU Yuan, ZHAO Xinjie. Detection of application layer DDoS attacks based on clustering [J]. Computer Engineering and Applications, 2016, 52(21): 116-120.
[12]	HE Heng1，2, HUANG Wei1，2, LI Tao1，2, ZENG Peng1，2, DONG Xinhua3. Multilevel DDoS protection mechanism based on SDS framework [J]. Computer Engineering and Applications, 2016, 52(1): 81-88.
[13]	HUANG Lujuan1，3, JIN Guang1，3, HE Jiaming2，3, JIANG Xianliang1. DDoS defense with jointed deployment of IP traceback and path identification [J]. Computer Engineering and Applications, 2014, 50(5): 74-78.
[14]	CHEN Shiwen, GUO Tong, HUANG Wanwei. DDoS attack detection based on fast fractional Fourier transform [J]. Computer Engineering and Applications, 2013, 49(24): 4-7.
[15]	CHEN Shiwen, WU Jiangxing, HUANG Wanwei. DDoS attack detection method based on conditional random field with feature set [J]. Computer Engineering and Applications, 2013, 49(17): 9-11.

Detecting distributed denial-of-service attacks based on statistical analysis

基于统计分析的DDoS攻击检测

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics