As traditional methods cannot effectively detect DDoS attacks in time
a DDoS attack detecting algorithm based on continuous wavelet transforms with reliability evaluation is proposed to detect the DDoS attacks in real-time. In the algorithm
continuous wavelet transforms are used to analyze the traffic data uninterruptedly and to detect the short-flat-burst or the long-flat-burst
which always represent DDoS attacks
and then an algorithm evaluates the reliability of alert
and to reduce the inaccurate alerts caused by single-point-burst and flow noise. Experiments show that the detection algorithm is more effective in detecting DDoS attacks than the discrete wavelet transform method
N-point-average method and gradient method.
关键词
Keywords
references
KIM Y, JO J Y, CHAO H J,et al. High-speed router filter for blocking TCP flooding under DDoS attack [C]∥Proceedings of the IEEE International Performance, Computing and Communication Conference. Piscataway, NJ,USA: IEEE, 2003:183-190.
YAAR A, PERRIG A, SONG D, et al. Pi: a path identification mechanism to defend against DDoS attacks security and privacy [C]∥Proceedings of 2003 Symposium on Security and Privacy. Piscataway, NJ, USA: IEEE, 2003:93-107.
LI Jinming, WANG Ruchuan. Real-time detection of DDoS attack based on VTP [J]. Acta Electronica Sinica,2007,35(4):791-796.
GROSSMANN A. Wavelet transform and edge detection [C]∥Stochastics Processes in Physics and Engineering. Dorecht,Netherlands: Reidel, 1986:89-96
MALLAT S. Zero-crossing of wavelet transform [J]. IEEE Trans on Information Theory,1997,37(4):1019-1033.
GARCIA R C, SADIKU M N O, CANNADY J D. WAID: wavelet analysis intrusion detection [C]∥The 2002 45th Midwest Symposium on Circuits and Systems. Piscataway, NJ, USA: IEEE, 2002:688 -691.
NASH D A, RAGSDALE D J. Simulation of self-similarity in network utilization patterns as a precursor to automated testing of intrusion detection systems [J]. IEEE Trans on Systems, Man and Cybernetics, 2001,31(4):327-331.
SUN Qindong,ZHANG Deyun,GAO Peng. Detecting distributed denial of service attacks based on time series analysis [J]. Chinese Journal of Computer,2005,28(5):768-773.