Improving the Two-stage Detection of Cyberattacks in SDN Environment Using Dynamic Thresholding

研究成果: Chapter in Book/Report/Conference proceedingConference contribution

抄録

In recent years, the DDoS (Distributed Denial of Service) attack continues to be one of the most dangerous threats even in the SDN (Software Defined Networking) environment. Many approaches have been proposed to deal with the DDoS attacks in the SDN environment. Among those approaches, the two-step detection, in which a trigger mechanism is added before the detection algorithm is called, is gaining more and more attention. In other words, it is the trigger, not the resource-consuming detection algorithm, that constantly monitors network traffic. Thus, the detection algorithm is only called when it is triggered. However, in the existing two-step methods, the trigger uses a static threshold to determine whether or not to start the detection process. In practice, it is difficult to determine an appropriate threshold, and the threshold has a decisive effect on the frequency of the detection process being called and ultimately, it impacts detection performance. In this paper, we propose a self-feedback dynamic thresholding system in which the threshold used in the trigger is dynamically adjusted based on the previous results of trigger and detection. Experimental results and our discussion show that our proposal significantly reduces the number of calls to the resource-consuming detection algorithm with no sacrifice of detection result.

本文言語英語
ホスト出版物のタイトルProceedings of the 2021 15th International Conference on Ubiquitous Information Management and Communication, IMCOM 2021
編集者Sukhan Lee, Hyunseung Choo, Roslan Ismail
出版社Institute of Electrical and Electronics Engineers Inc.
ISBN(電子版)9780738105086
DOI
出版ステータス出版済み - 1 4 2021
イベント15th International Conference on Ubiquitous Information Management and Communication, IMCOM 2021 - Seoul, 大韓民国
継続期間: 1 4 20211 6 2021

出版物シリーズ

名前Proceedings of the 2021 15th International Conference on Ubiquitous Information Management and Communication, IMCOM 2021

会議

会議15th International Conference on Ubiquitous Information Management and Communication, IMCOM 2021
国/地域大韓民国
CitySeoul
Period1/4/211/6/21

All Science Journal Classification (ASJC) codes

  • 人工知能
  • コンピュータ ネットワークおよび通信
  • コンピュータ サイエンスの応用
  • 情報システム
  • 情報システムおよび情報管理
  • 健康情報学

フィンガープリント

「Improving the Two-stage Detection of Cyberattacks in SDN Environment Using Dynamic Thresholding」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル