文章基本信息

标题：E-Had: A distributed and collaborative detection framework for early detection of DDoS attacks
本地全文：下载
作者：Nilesh Vishwasrao Patil ; C. Rama Krishna ; Krishan Kumar 等
期刊名称：Journal of King Saud University @?C Computer and Information Sciences
印刷版ISSN：1319-1578
出版年度：2019
页码：1-15
DOI：10.1016/j.jksuci.2019.06.016
出版社：Elsevier
摘要：During the past few years, the traffic volume of legitimate traffic and attack traffic has increased manifolds up to Terabytes per second (Tbps). Because of the processing of such a huge traffic volume, it has become implausible to detect high rate attacks in time using conventional DDoS defense architectures. At present, the majority of the DDoS defense systems are deployed predominantly at the victim-end domain But these victim-end defense systems themselves are vulnerable to HR-DDoS attacks as the mammoth volume of attack traffic is generated by such type of attacks. The insufficient computational resources further make the problem more crucial at the victim-end. This paper proposed a distributed and collaborative architecture called E-Had that is capable of efficiently processing a large amount of data by distributing it among a number of mappers and reducers in a Hadoop based cluster. The proposed E-Had system has been comprehensively validated using various publicly available benchmarked datasets and real datasets generated in HA-DDoS testbed in terms of various detection system evaluation metrics. The experimental results clearly show that the proposed detection system is capable of early detection of different scenarios of DDoS attacks along with differentiating them from flash crowds.
关键词：DoS attack ; DDoS attack ; Apache Hadoop ; Hadoop Distributed File System (HDFS) ; MapReduce ; Entropy ; Big Data