Distinguishing Flooding Distributed Denial of Service from Flash Crowds Using Four Data Mining Approaches
Computer Science and Information Systems, Tome 14 (2017) no. 3
Cet article a éte moissonné depuis la source Computer Science and Information Systems website
Flooding Distributed Denial of Service (DDoS) attacks can cause significant damage to Internet. These attacks have many similarities to Flash Crowds (FCs) and are always difficult to distinguish. To solve this issue, this paper first divides existing methods into two categories to clarify existing researches. Moreover, after conducting an extensive analysis, a new feature set is concluded to profile DDoS and FC. Along with this feature set, this paper proposes a new method that employs Data Mining approaches to discriminate between DDoS attacks and FCs. Experiments are conducted to evaluate the proposed method based on two realworld datasets. The results demonstrate that the proposed method could achieve a high accuracy (more than 98%). Additionally, compared with a traditional entropy method, the proposed method still demonstrates better performance.
Keywords:
Flooding DDoS, Flash Crowds, Data Mining, Entropy
@article{CSIS_2017_14_3_a18,
author = {Bin Kong and Kun Yang and Degang Sun and Meimei Li and Zhixin Shi},
title = {Distinguishing {Flooding} {Distributed} {Denial} of {Service} from {Flash} {Crowds} {Using} {Four} {Data} {Mining} {Approaches}},
journal = {Computer Science and Information Systems},
year = {2017},
volume = {14},
number = {3},
url = {http://geodesic.mathdoc.fr/item/CSIS_2017_14_3_a18/}
}
TY - JOUR AU - Bin Kong AU - Kun Yang AU - Degang Sun AU - Meimei Li AU - Zhixin Shi TI - Distinguishing Flooding Distributed Denial of Service from Flash Crowds Using Four Data Mining Approaches JO - Computer Science and Information Systems PY - 2017 VL - 14 IS - 3 UR - http://geodesic.mathdoc.fr/item/CSIS_2017_14_3_a18/ ID - CSIS_2017_14_3_a18 ER -
%0 Journal Article %A Bin Kong %A Kun Yang %A Degang Sun %A Meimei Li %A Zhixin Shi %T Distinguishing Flooding Distributed Denial of Service from Flash Crowds Using Four Data Mining Approaches %J Computer Science and Information Systems %D 2017 %V 14 %N 3 %U http://geodesic.mathdoc.fr/item/CSIS_2017_14_3_a18/ %F CSIS_2017_14_3_a18
Bin Kong; Kun Yang; Degang Sun; Meimei Li; Zhixin Shi. Distinguishing Flooding Distributed Denial of Service from Flash Crowds Using Four Data Mining Approaches. Computer Science and Information Systems, Tome 14 (2017) no. 3. http://geodesic.mathdoc.fr/item/CSIS_2017_14_3_a18/