Adaptive DDoS Attack Detection Method Based on Multiple-Kernel Learning
Joint Authors
Sheng, Victor S.
Cheng, Jieren
Tang, Xiangyan
Zhang, Chen
Dong, Zhe
Li, Junqi
Source
Security and Communication Networks
Issue
Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-19, 19 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2018-10-16
Country of Publication
Egypt
No. of Pages
19
Main Subjects
Information Technology and Computer Science
Abstract EN
Distributed denial of service (DDoS) attacks has caused huge economic losses to society.
They have become one of the main threats to Internet security.
Most of the current detection methods based on a single feature and fixed model parameters cannot effectively detect early DDoS attacks in cloud and big data environment.
In this paper, an adaptive DDoS attack detection method (ADADM) based on multiple-kernel learning (MKL) is proposed.
Based on the burstiness of DDoS attack flow, the distribution of addresses, and the interactivity of communication, we define five features to describe the network flow characteristic.
Based on the ensemble learning framework, the weight of each dimension is adaptively adjusted by increasing the interclass mean with a gradient ascent and reducing the intraclass variance with a gradient descent, and the classifier is established to identify an early DDoS attack by training simple multiple-kernel learning (SMKL) models with two characteristics including interclass mean squared difference growth (M-SMKL) and intraclass variance descent (S-SMKL).
The sliding window mechanism is used to coordinate the S-SMKL and M-SMKL to detect the early DDoS attack.
The experimental results indicate that this method can detect DDoS attacks early and accurately.
American Psychological Association (APA)
Cheng, Jieren& Zhang, Chen& Tang, Xiangyan& Sheng, Victor S.& Dong, Zhe& Li, Junqi. 2018. Adaptive DDoS Attack Detection Method Based on Multiple-Kernel Learning. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-19.
https://search.emarefa.net/detail/BIM-1214201
Modern Language Association (MLA)
Cheng, Jieren…[et al.]. Adaptive DDoS Attack Detection Method Based on Multiple-Kernel Learning. Security and Communication Networks No. 2018 (2018), pp.1-19.
https://search.emarefa.net/detail/BIM-1214201
American Medical Association (AMA)
Cheng, Jieren& Zhang, Chen& Tang, Xiangyan& Sheng, Victor S.& Dong, Zhe& Li, Junqi. Adaptive DDoS Attack Detection Method Based on Multiple-Kernel Learning. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-19.
https://search.emarefa.net/detail/BIM-1214201
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1214201