Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest
Joint Authors
Idhammad, Mohamed
Afdel, Karim
Belouch, Mustapha
Source
Security and Communication Networks
Issue
Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-13, 13 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2018-06-05
Country of Publication
Egypt
No. of Pages
13
Main Subjects
Information Technology and Computer Science
Abstract EN
Cloud Computing services are often delivered through HTTP protocol.
This facilitates access to services and reduces costs for both providers and end-users.
However, this increases the vulnerabilities of the Cloud services face to HTTP DDoS attacks.
HTTP request methods are often used to address web servers’ vulnerabilities and create multiple scenarios of HTTP DDoS attack such as Low and Slow or Flooding attacks.
Existing HTTP DDoS detection systems are challenged by the big amounts of network traffic generated by these attacks, low detection accuracy, and high false positive rates.
In this paper we present a detection system of HTTP DDoS attacks in a Cloud environment based on Information Theoretic Entropy and Random Forest ensemble learning algorithm.
A time-based sliding window algorithm is used to estimate the entropy of the network header features of the incoming network traffic.
When the estimated entropy exceeds its normal range the preprocessing and the classification tasks are triggered.
To assess the proposed approach various experiments were performed on the CIDDS-001 public dataset.
The proposed approach achieves satisfactory results with an accuracy of 99.54%, a FPR of 0.4%, and a running time of 18.5s.
American Psychological Association (APA)
Idhammad, Mohamed& Afdel, Karim& Belouch, Mustapha. 2018. Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1213864
Modern Language Association (MLA)
Idhammad, Mohamed…[et al.]. Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest. Security and Communication Networks No. 2018 (2018), pp.1-13.
https://search.emarefa.net/detail/BIM-1213864
American Medical Association (AMA)
Idhammad, Mohamed& Afdel, Karim& Belouch, Mustapha. Detection System of HTTP DDoS Attacks in a Cloud Environment Based on Information Theoretic Entropy and Random Forest. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1213864
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1213864