LDDoS Attack Detection by Using Ant Colony Optimization Algorithms

淡江大學機構典藏 > 工學院 > 資訊工程學系暨研究所 > 期刊論文 > Item 987654321/122973

請使用永久網址來引用或連結此文件: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/122973

題名:	LDDoS Attack Detection by Using Ant Colony Optimization Algorithms
作者:	Chen, Hsia-Hsiang;Huang, Shih-Kun
關鍵詞:	distributed denial of service (DDoS);low-rate distributed denial of service (LDDoS);ant colony system;ant colony optimization (ACO);metaheuristic technique;software defined network (SDN);swarm optimization algorithm;probabilistic packet marking (PPM)
日期:	2016-07
上傳時間:	2023-04-28 16:33:14 (UTC+8)
出版者:	Journal of Information Science & Engineering
摘要:	Internet service providers and equipment vendors are subject to cyber threats. One of the most prevalent security threats is the distributed denial of service (DDoS) attack. In a DDoS attack, the attack traffic and attacker¡¦s IP address are respectively difficult to detect and trace. This is because attack traffic is similar to regular traffic and the attack is executed by multiple attackers. This study focused on solving the low-rate distributed denial of service (LDDoS) problem; this problem is difficult to detect and trace compared with a DDoS attack. We therefore propose a novel distributed detection and identification ant colony system (DDIACS) framework, which is an ant-colony-optimizationbased metaheuristic technique, for solving the LDDoS problem. The DDIACS framework comprises three stages, which entail an information heuristic rule, a multiagent algorithm, and a backward and forward search method. Moreover, the DDIACS framework is compliant with the emerging software defined network (SDN) because in this framework, a control plane and data plane are used to monitor and manage the network topology. The proposed framework demonstrates SDN advantages such as enabling networks to exhibit flexibility, fast convergence, and robustness in overcoming complicated multi- attacker problems. In addition, this study investigated the time and space complexity of the DDIACS framework and compared this framework with the swarm optimization algorithm and probabilistic packet marking. This study designed the network topology by using the data set from the DARPA and KDD repository. The simulation results show that the proposed framework resolves the problems in using other algorithms and that the DDIACS framework demonstrates better performance than existing methods; furthermore, the adaptive metaheuristic algorithm outperforms other methods in thwarting an LDDoS attack. The detection rate is about 89% and the accuracy is greater than 83%.
關聯:	Journal of Information Science and Engineering 32(4), p.995-1020
顯示於類別:	[資訊工程學系暨研究所] 期刊論文

文件中的檔案:

檔案	大小	格式	瀏覽次數
index.html	0Kb	HTML	63	檢視/開啟

在機構典藏中所有的資料項目都受到原著作權保護.

TAIR相關文章

資料載入中.....