A Machine Learning Based Approach for Detecting DRDoS Attacks and Its Performance Evaluation

Yuxuan Gao, Yaokai Feng, Junpei Kawamoto, Kouichi Sakurai

研究成果: Chapter in Book/Report/Conference proceedingConference contribution

9 被引用数 (Scopus)

抄録

DRDoS (Distributed Reflection Denial of Service) attack is a kind of DoS (Denial of Service) attack, in which third-party servers are tricked into sending large amounts of data to the victims. That is, attackers use source address IP spoofing to hide their identity and cause third-parties to send data to the victims as identified by the source address field of the IP packet. This is called reflection because the servers of benign services are tricked into "reflecting" attack traffic to the victims. The most typical existing detection methods of such attacks are designed based on known attacks by protocol and are difficult to detect the unknown ones. According to our investigations, one protocol-independent detection method has been existing, which is based on the assumption that a strong linear relationship exists among the abnormal flows from the reflector to the victim. Moreover, the method is assumed that the all packets from reflectors are attack packets when attacked, which is clearly not reasonable. In this study, we found five features are effective for detecting DRDoS attacks, and we proposed a method to detect DRDoS attacks using these features and machine learning algorithms. Its detection performance is experimentally examined and the experimental result indicates that our proposal is of clearly better detection performance.

本文言語英語
ホスト出版物のタイトルProceedings - 11th Asia Joint Conference on Information Security, AsiaJCIS 2016
出版社Institute of Electrical and Electronics Engineers Inc.
ページ80-86
ページ数7
ISBN(電子版)9781509022854
DOI
出版ステータス出版済み - 12 12 2016
イベント11th Asia Joint Conference on Information Security, AsiaJCIS 2016 - Fukuoka, 日本
継続期間: 8 4 20168 5 2016

出版物シリーズ

名前Proceedings - 11th Asia Joint Conference on Information Security, AsiaJCIS 2016

その他

その他11th Asia Joint Conference on Information Security, AsiaJCIS 2016
Country日本
CityFukuoka
Period8/4/168/5/16

All Science Journal Classification (ASJC) codes

  • Information Systems
  • Safety, Risk, Reliability and Quality
  • Computer Networks and Communications

フィンガープリント 「A Machine Learning Based Approach for Detecting DRDoS Attacks and Its Performance Evaluation」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル