Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest

Joint Authors

Idhammad, Mohamed
Afdel, Karim
Belouch, Mustapha

Source

Security and Communication Networks

Issue

Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-13, 13 p.

Publisher

Hindawi Publishing Corporation

Publication Date

2018-06-05

Country of Publication

Egypt

No. of Pages

13

Main Subjects

Information Technology and Computer Science

Abstract EN

Cloud Computing services are often delivered through HTTP protocol.

This facilitates access to services and reduces costs for both providers and end-users.

However, this increases the vulnerabilities of the Cloud services face to HTTP DDoS attacks.

HTTP request methods are often used to address web servers’ vulnerabilities and create multiple scenarios of HTTP DDoS attack such as Low and Slow or Flooding attacks.

Existing HTTP DDoS detection systems are challenged by the big amounts of network traffic generated by these attacks, low detection accuracy, and high false positive rates.

In this paper we present a detection system of HTTP DDoS attacks in a Cloud environment based on Information Theoretic Entropy and Random Forest ensemble learning algorithm.

A time-based sliding window algorithm is used to estimate the entropy of the network header features of the incoming network traffic.

When the estimated entropy exceeds its normal range the preprocessing and the classification tasks are triggered.

To assess the proposed approach various experiments were performed on the CIDDS-001 public dataset.

The proposed approach achieves satisfactory results with an accuracy of 99.54%, a FPR of 0.4%, and a running time of 18.5s.

American Psychological Association (APA)

Idhammad, Mohamed& Afdel, Karim& Belouch, Mustapha. 2018. Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1213864

Modern Language Association (MLA)

Idhammad, Mohamed…[et al.]. Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest. Security and Communication Networks No. 2018 (2018), pp.1-13.
https://search.emarefa.net/detail/BIM-1213864

American Medical Association (AMA)

Idhammad, Mohamed& Afdel, Karim& Belouch, Mustapha. Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1213864

Data Type

Journal Articles

Language

English

Notes

Includes bibliographical references

Record ID

BIM-1213864