On the Detection of DDoS Attackers for Large-Scale Networks
On the Detection of DDoS Attackers for Large-Scale Networks
复制标题
大型网络DDoS攻击者的检测
DOI：
--
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
S. Horiguchi
中科院分区：
文献类型：
--
作者：
Dalia Nashat;Xiaohong Jiang;S. Horiguchi
The Distributed Denial of Service attacks (DDoS) is one of the major threats to network security that exhausts network bandwidth and resources. The current detection schemes are sensitive to the number of attackers and may lead to a high false positive probability especially for largescale networks with huge number of attackers. It is notable, however, that in the current DDoS attacks, the flooding rate is usually distributed among many flooding sources to make the detection more difficult. In this paper we propose a more efficient detection scheme for Web Service DDoS attackers. The proposed scheme is based on the number of incoming requests to the server with the consideration of the clients activity (Active and Non-Active clients during the detection time). To make our scheme scalable to large-Scale networks, the non-adaptive group testing theory is applied to detect attackers using low state overhead. Extensive tracedriven simulation has been conducted on real Web trace to demonstrate the efficiency of the proposed scheme in terms of its false positive, false negative probabilities and also detection time.
