带可信度评估的连续小波分布式拒绝服务攻击检测算法

杨新宇; 侯光霞; 杨树森

您当前的位置：

首页 >

文章列表页 >

带可信度评估的连续小波分布式拒绝服务攻击检测算法

专题研究 | 更新时间：2025-12-08

- 带可信度评估的连续小波分布式拒绝服务攻击检测算法
- DDoS Attacks Detecting Algorithm Based on Continuous Wavelet Transforms with Reliability Evaluation
- 西安交通大学学报 2008年42卷第8期页码：936-939
- 作者机构：
  
  西安交通大学计算机科学与技术系,西安,710049
- 作者简介：
- 基金信息：
  
  : 2007-11-08. 作者简介: 杨新宇(1973-),男,博士,副教授. 基金项目: 国家自然科学基金资助项目(60403028)
- DOI：
  中图分类号： TP309
- 网络首发：2008-08-10，
  
  纸质出版：2008
- 稿件说明：
移动端阅览
杨新宇, 侯光霞, 杨树森. 带可信度评估的连续小波分布式拒绝服务攻击检测算法[J]. 西安交通大学学报, 2008,42(8):936-939.

杨新宇, 侯光霞, 杨树森. DDoS Attacks Detecting Algorithm Based on Continuous Wavelet Transforms with Reliability Evaluation[J]. 2008, 42(8): 936-939.
杨新宇, 侯光霞, 杨树森. 带可信度评估的连续小波分布式拒绝服务攻击检测算法[J]. 西安交通大学学报, 2008,42(8):936-939. DOI：

杨新宇, 侯光霞, 杨树森. DDoS Attacks Detecting Algorithm Based on Continuous Wavelet Transforms with Reliability Evaluation[J]. 2008, 42(8): 936-939. DOI：

摘要

针对传统方法难以实时、有效检测分布式拒绝服务(DDoS)攻击的问题

提出了一种带可信度评估的连续小波DDoS攻击检测算法.首先用不间断的连续小波变换对流量信号进行同步分析

通过发现平台突发信号来实时检测DDoS攻击

然后用报警可信度评估算法对经连续小波变换的检测结果进行二次处理

以消除单点突发信号和网络流量噪声带来的影响.经离散小波变换法、N点平均法以及梯度法的实验对比表明

所提算法对流量数据中的平台突发信号的检测效果比较好.

Abstract

As traditional methods cannot effectively detect DDoS attacks in time

a DDoS attack detecting algorithm based on continuous wavelet transforms with reliability evaluation is proposed to detect the DDoS attacks in real-time. In the algorithm

continuous wavelet transforms are used to analyze the traffic data uninterruptedly and to detect the short-flat-burst or the long-flat-burst

which always represent DDoS attacks

and then an algorithm evaluates the reliability of alert

and to reduce the inaccurate alerts caused by single-point-burst and flow noise. Experiments show that the detection algorithm is more effective in detecting DDoS attacks than the discrete wavelet transform method

N-point-average method and gradient method.

关键词

Keywords

references

KIM Y, JO J Y, CHAO H J,et al. High-speed router filter for blocking TCP flooding under DDoS attack [C]∥Proceedings of the IEEE International Performance, Computing and Communication Conference. Piscataway, NJ,USA: IEEE, 2003:183-190.

YAAR A, PERRIG A, SONG D, et al. Pi: a path identification mechanism to defend against DDoS attacks security and privacy [C]∥Proceedings of 2003 Symposium on Security and Privacy. Piscataway, NJ, USA: IEEE, 2003:93-107.

李金明,王汝传. 基于VIP方法的DDoS攻击实时检测技术研究 [J].电子学报,2007,35(4):791-796.

LI Jinming, WANG Ruchuan. Real-time detection of DDoS attack based on VTP [J]. Acta Electronica Sinica,2007,35(4):791-796.

GROSSMANN A. Wavelet transform and edge detection [C]∥Stochastics Processes in Physics and Engineering. Dorecht,Netherlands: Reidel, 1986:89-96

MALLAT S. Zero-crossing of wavelet transform [J]. IEEE Trans on Information Theory,1997,37(4):1019-1033.

GARCIA R C, SADIKU M N O, CANNADY J D. WAID: wavelet analysis intrusion detection [C]∥The 2002 45th Midwest Symposium on Circuits and Systems. Piscataway, NJ, USA: IEEE, 2002:688 -691.

NASH D A, RAGSDALE D J. Simulation of self-similarity in network utilization patterns as a precursor to automated testing of intrusion detection systems [J]. IEEE Trans on Systems, Man and Cybernetics, 2001,31(4):327-331.

杨福生.小波变换的工程分析与应用 [M]. 北京:科学出版社,2006.

孙钦东,张德运,高鹏. 基于时间序列分析的分布式拒绝服务攻击检测 [J].计算机学报,2005,28(5):768-773.

SUN Qindong,ZHANG Deyun,GAO Peng. Detecting distributed denial of service attacks based on time series analysis [J]. Chinese Journal of Computer,2005,28(5):768-773.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

采用小波变换和双向长短期记忆网络的脑电睡眠分期模型

三塔合一间接空冷系统结构参数对夏季运行特性的影响研究

不同板叠材料热声热机能量转换过程数值模拟研究

离子液体改性燃料的电流体动力学效应研究

超临界二氧化碳向心透平轮背间隙内风阻损失及流动特性研究