Next Generation Automatic Trace Back System for Broad Unlawful Access Based on Time-Series Analysis of Trafic Patterns

点击翻译按钮获取中文摘要

Denial of Service (DoS) attack is the threat of an information society and difficult to defense. In order to avoid the damage by the DoS attacks, it is necessary to trace back the attack path because of IP spoofing of attackers hosts. In this research, we proposed a new concept that can overcome the IP spoofing problem, based on Traffic Pattern which is change in packet numbers over time.We first constructed a monitoring system for Traffic Patterns. Then we proposed a new algorithm to detect the DoS attacks and trace back the attack path using Traffic Patterns. The detecting algorithm adopts a predicti6n method and achieves high detection accuracy. And the trace back algorithm is based on quadratic problem which can solve the combinatorial problem among the Traffic Patterns.Our experiments showed that the Traffic Pattern concept can trace back the attack path and overcome the IP spoofing problem.