Machine learning for automatic defence against Distributed Denial of Service attacks

被引:37
作者
Seufert, Stefan [1 ]
O'Brien, Darragh [1 ]
机构
[1] Dublin City Univ, Sch Comp, Dublin 9, Ireland
来源
2007 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS, VOLS 1-14 | 2007年
关键词
D O I
10.1109/ICC.2007.206
中图分类号
TM [电工技术]; TN [电子技术、通信技术];
学科分类号
0808 ; 0809 ;
摘要
Distributed Denial of Service attacks pose a serious threat to many businesses which rely on constant availability of their network services. Companies like Google, Yahoo and Amazon are completely reliant on the Internet for their business. It is very hard to defend against these attacks because of the many different ways in which hackers may strike. Distinguishing between legitimate and malicious traffic is a complex task. Setting up filtering by hand is often impossible due to the large number of hosts involved in the attack. The goal of this paper is to explore the effectiveness of machine learning techniques in developing automatic defences against DDoS attacks. As a first step, a data collection and traffic filtering framework is developed. This foundation is then used to explore the potential of artificial neural networks in the defence against DDoS attacks.
引用
收藏
页码:1217 / 1222
页数:6
相关论文
共 24 条
[1]  
[Anonymous], 2004, INTRO COMPUTER SECUR
[2]  
[Anonymous], 2001, P 10 INT C WORLD WID
[3]  
[Anonymous], 1997, Machine Learning
[4]  
DOULIGERIS C, 2003, SIGNAL PROCESSING IN, P190
[5]   Statistical approaches to DDoS attack detection and response [J].
Feinstein, L ;
Schnackenberg, D ;
Balupari, R ;
Kindred, D .
DARPA INFORMATION SURVIVABILITY CONFERENCE AND EXPOSITION, VOL I, PROCEEDINGS, 2003, :303-314
[6]   Real-time detection of distributed denial-of-service attacks using RBF networks and statistical features [J].
Gavrilis, D ;
Dermatas, E .
COMPUTER NETWORKS, 2005, 48 (02) :235-245
[7]   A NOTE ON DENIAL-OF-SERVICE IN OPERATING-SYSTEMS [J].
GLIGOR, VD .
IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 1984, 10 (03) :320-324
[8]  
HUANG C, 2005, WIRELESS COMMUNICATI, V2, P1175
[9]  
Jin C., 2003, CCS '03, P30
[10]   A covariance analysis model for DDoS attack detection [J].
Jin, SY ;
Yeung, DS .
2004 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS, VOLS 1-7, 2004, :1882-1886