文章基本信息

标题：Correlation-based Detection of LDoS Attack
本地全文：下载
作者：Wu, Zhi-jun ; Wang, Minghua ; Zhang, Haitao 等
期刊名称：Journal of Software
印刷版ISSN：1796-217X
出版年度：2012
卷号：7
期号：10
页码：2341-2348
DOI：10.4304/jsw.7.10.2341-2348
语种：English
出版社：Academy Publisher
摘要：Low-rate Denial of Service (LDoS) attack and TCP flows are simulated in the time and frequency domain for the purpose of analyzing their signatures and extracting period T and duration L of LDoS attack, which are two correlative parameters used in the proposed detecting approach. In the correlation operation, the reference signal is the simulated traffic of LDoS attack, which are built based on the extracted parameters of T and L. The incoming signal is the hybrid signal (TCP flows plus Real LDoS attacks). A detect threshold is established to be compared with the results of correlation operation. If the correlation value exceeds the threshold, the LDoS attack is determined. The proposed method has been tested both in network simulation NS-2 platform and network testbed environment with different parameters of T and L. Experimental results show that the proposed approach reaches the good performance with higher detect rate P _D , and lower false negative alarm rate P _FN and false positive alarm rate P _FP .
关键词：LDoS;correlation;detection;period;duration