Non-negative increment feature detection of the traffic throughput for early DDoS attack

Ying Huang, Huizhong Sun, H. Jonathan Chao, Xiong Chao

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

One of the major threats to cyber security is Distributed Denial of Service (DDoS) attacks. In this paper, we reveal the non-negative and cumulative increment effect of DDoS traffic throughput that is the feature accurately distinguished DDoS attacking traffic from normal flash crowd traffic. Our scheme can detect a DDoS attack in its early stages based on these feature. It can differentiate DDoS from flash crowd traffic effectively even if DDoS is potential. This scheme detects DDoS attacks with on-line and distributed characteristics. Simulation shows the algorithm's validity and accuracy.

Original languageEnglish (US)
Title of host publicationProceedings - International Conference on Signal Image Technologies and Internet Based Systems, SITIS 2007
Pages121-126
Number of pages6
DOIs
StatePublished - 2007
Event3rd IEEE International Conference on Signal Image Technologies and Internet Based Systems, SITIS'07 - Jiangong Jinjiang, Shanghai, China
Duration: Dec 16 2007Dec 18 2007

Publication series

NameProceedings - International Conference on Signal Image Technologies and Internet Based Systems, SITIS 2007

Other

Other3rd IEEE International Conference on Signal Image Technologies and Internet Based Systems, SITIS'07
CountryChina
CityJiangong Jinjiang, Shanghai
Period12/16/0712/18/07

ASJC Scopus subject areas

  • Computer Graphics and Computer-Aided Design
  • Computer Networks and Communications
  • Signal Processing

Fingerprint Dive into the research topics of 'Non-negative increment feature detection of the traffic throughput for early DDoS attack'. Together they form a unique fingerprint.

Cite this