umu.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Multi-Scale Low-Rate DDoS Attack Detection Using the Generalized Total Variation Metric
Umeå University, Faculty of Science and Technology, Department of Computing Science. Umea University. (Distributed Systems)
Umeå University, Faculty of Science and Technology, Department of Computing Science. Umea University. (Distributed Systems)
2018 (English)In: 17th IEEE International Conference on Machine Learning and Applications, IEEE, 2018, p. 1040-1047Conference paper, Published paper (Refereed)
Abstract [en]

We propose a mechanism to detect multi-scale low-rate DDoS attacks which uses a generalized total variation metric. The proposed metric is highly sensitive towards detecting different variations in the network traffic and evoke more distance between legitimate and attack traffic as compared to the other detection mechanisms. Most low-rate attackers invade the security system by scale-in-and-out of periodic packet burst towards the bottleneck router which severely degrades the Quality of Service (QoS) of TCP applications. Our proposed mechanism can effectively identify attack traffic of this natures, despite its similarity to legitimate traffic, based on the spacing value of our metric. We evaluated our mechanism using datasets from CAIDA DDoS, MIT Lincoln Lab, and real-time testbed traffic. Our results demonstrate that our mechanism exhibits good accuracy and scalability in the detection of multi-scale low-rate DDoS attacks.

Place, publisher, year, edition, pages
IEEE, 2018. p. 1040-1047
Keywords [en]
Multi-scale, Distributed denial of service, Low-rate, Total variation metric
National Category
Computer Sciences
Research subject
computer and systems sciences
Identifiers
URN: urn:nbn:se:umu:diva-155560DOI: 10.1109/ICMLA.2018.00170ISBN: 978-1-5386-6805-4 (electronic)OAI: oai:DiVA.org:umu-155560DiVA, id: diva2:1281438
Conference
17th IEEE International Conference on Machine Learning and Applications, 2018, 17-20 December, Orlando, FL, USA
Funder
The Kempe Foundations, SMK-1644Available from: 2019-01-22 Created: 2019-01-22 Last updated: 2019-01-22Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full text

Authority records BETA

Bhuyan, Monowar H.Elmroth, Erik

Search in DiVA

By author/editor
Bhuyan, Monowar H.Elmroth, Erik
By organisation
Department of Computing Science
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 374 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf