RTVD: A Real-Time Volumetric Detection Scheme for DDoS in the Internet of Things

被引：61

作者：

Li, Jiabin ^{[1
]}

Liu, Ming ^{[1
]}

Xue, Zhi ^{[1
]}

Fan, Xiaochen ^{[2
]}

He, Xiangjian ^{[3
,4
]}

机构：

[1] Shanghai Jiao Tong Univ, Sch Elect Informat & Elect Engn, Shanghai 200240, Peoples R China

[2] Univ Technol Sydney, Sch Elect & Data Engn, Ultimo, NSW 2007, Australia

[3] Univ Technol Sydney, Global Big Data Technol Ctr, Comp Vis & Pattern Recognit Lab, Ultimo, NSW 2007, Australia

[4] Univ Technol Sydney, Ctr Real Time Informat Networks CRIN, Network Secur Res Team, Ultimo, NSW 2007, Australia

来源：

IEEE ACCESS | 2020年 / 8卷

关键词：

DDoS detection; IoT security; joint entropy; quintile deviation check; real-time detection; sliding time window; NETWORK; ATTACKS;

D O I：

10.1109/ACCESS.2020.2974293

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Distributed Denial of Service (DDoS) attacks are increasingly harmful to the cyberspace nowadays. The attackers can now easily launch a bigger and more challenging DDoS attack both towards and with Internet-of-Things (IoT) devices, due to the fast popularization of them. Because of the characteristic of fast overwhelming, it is important to make fast as well as accurate response to DDoS attacks, and the real-time performance can be even more important to prevent and legitimate the attacks. Among the methods proposed by researchers, the entropy-based detection method provides a sensitive and reliable performance. However, the balance between computational complexity and recognition accuracy remains a challenge. In this paper, we propose a detection method that consists of 3 main parts in different aspects: a sliding time window to fasten the entropy calculation, a single-directional filter to realize early detection during the DDoS progress but not after the crash, and a quintile deviation check algorithm to optimize the detection result. These will eventually lead to a real-time and high-efficient performance to recognize IoT DDoS attacks as soon as possible.

引用

页码：36191 / 36201

页数：11

共 36 条

[1]