Research on the Active DDoS Filtering Algorithm Based on IP Flow
- 1 January 2009
- conference paper
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE) in 2009 Fifth International Conference on Natural Computation
- Vol. 4, 628-632
- https://doi.org/10.1109/icnc.2009.550
Abstract
Distributed denial-of-service flooding attacks against public web servers are increasingly common. It is impossible for the victim servers to work on the individual level of on-going traffic flows. The scheme establishes IP Flow which is used to select proper features for DDoS detection. Five features are analyzed by the experiments. The IP flow statistics is mainly used to allocate the weights for traffic routing by routers. A new algorithm is thus proposed to get efficiently maximum throughput by the traffic filtering, and its feasibility and validity have been verified in real network circumstances. The algorithm shows its advantages that it is with high average detection and with low false alarm and miss alarm. Moreover, it can optimize the network traffic simultaneously with defending against DDoS attack, thus eliminating efficiently the global burst of traffic arising from normal traffic so as to improve greatly the efficiency of servers.Keywords
This publication has 5 references indexed in Scilit:
- Application of anomaly detection algorithms for detecting SYN flooding attacksPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2005
- Filtering of shrew DDoS attacks in frequency domainPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2005
- Hop-count filteringPublished by Association for Computing Machinery (ACM) ,2003
- IP traceback-based intelligent packet filtering: A novel technique for defending against internet DDoS attacksIEEE Transactions on Parallel and Distributed Systems, 2003
- A simulation study of the proactive server roaming for mitigating denial of service attacksPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2003