Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test
Distributed Denial of Service (DDoS) is the most dangerous attacks that targeted public servers. It is difficult for victims to detect these kinds of attacks because DDoS attacks can be done remotely and reflected by legal users in the network toward specific victim. The goal of this research is...
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Published: |
Taylor's University
2023
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/107252/ https://jestec.taylors.edu.my/V18Issue2.htm |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| id |
my.upm.eprints.107252 |
|---|---|
| record_format |
eprints |
| spelling |
my.upm.eprints.1072522024-10-17T01:56:18Z http://psasir.upm.edu.my/id/eprint/107252/ Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test Ali, Basheer Husham Sulaiman, Nasri Al-Haddad, S. A. R. Atan, Rodziah Mohd Hassan, Siti Lailatul Distributed Denial of Service (DDoS) is the most dangerous attacks that targeted public servers. It is difficult for victims to detect these kinds of attacks because DDoS attacks can be done remotely and reflected by legal users in the network toward specific victim. The goal of this research is to locate compromised interface and identify different types of DDoS attacks, especially up-to-date kinds of them. Multiple features of Entropy and Sequential Probabilities Ratio Test approach (E-SPRT) was proposed and implemented in order to detect different types of DDoS attacks. CICFlowMeter was used to produce bidirectional network flows and extract 82 of different features from each flow. Multiple features of E-SPRT divide incoming flows into fixed groups that have same number of flows called window size. CICDDoS2019 dataset was chosen in this research because it contains various kinds of recent attacks. The performance of all features of E-SPRT were tested by confusion matrix and compared with other higher-accuracy techniques. Finally, the implemented model with different features detects most up to date DDoS attacks and achieves an accuracy and detection rate almost over 99%. Taylor's University 2023-04 Article PeerReviewed Ali, Basheer Husham and Sulaiman, Nasri and Al-Haddad, S. A. R. and Atan, Rodziah and Mohd Hassan, Siti Lailatul (2023) Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test. Journal of Engineering Science and Technology, 18 (2). pp. 844-861. ISSN 1823-4690 https://jestec.taylors.edu.my/V18Issue2.htm |
| institution |
Universiti Putra Malaysia |
| building |
UPM Library |
| collection |
Institutional Repository |
| continent |
Asia |
| country |
Malaysia |
| content_provider |
Universiti Putra Malaysia |
| content_source |
UPM Institutional Repository |
| url_provider |
http://psasir.upm.edu.my/ |
| description |
Distributed Denial of Service (DDoS) is the most dangerous attacks that targeted
public servers. It is difficult for victims to detect these kinds of attacks because
DDoS attacks can be done remotely and reflected by legal users in the network
toward specific victim. The goal of this research is to locate compromised
interface and identify different types of DDoS attacks, especially up-to-date kinds
of them. Multiple features of Entropy and Sequential Probabilities Ratio Test
approach (E-SPRT) was proposed and implemented in order to detect different
types of DDoS attacks. CICFlowMeter was used to produce bidirectional
network flows and extract 82 of different features from each flow. Multiple
features of E-SPRT divide incoming flows into fixed groups that have same
number of flows called window size. CICDDoS2019 dataset was chosen in this
research because it contains various kinds of recent attacks. The performance of
all features of E-SPRT were tested by confusion matrix and compared with other
higher-accuracy techniques. Finally, the implemented model with different
features detects most up to date DDoS attacks and achieves an accuracy and
detection rate almost over 99%. |
| format |
Article |
| author |
Ali, Basheer Husham Sulaiman, Nasri Al-Haddad, S. A. R. Atan, Rodziah Mohd Hassan, Siti Lailatul |
| spellingShingle |
Ali, Basheer Husham Sulaiman, Nasri Al-Haddad, S. A. R. Atan, Rodziah Mohd Hassan, Siti Lailatul Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| author_facet |
Ali, Basheer Husham Sulaiman, Nasri Al-Haddad, S. A. R. Atan, Rodziah Mohd Hassan, Siti Lailatul |
| author_sort |
Ali, Basheer Husham |
| title |
Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| title_short |
Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| title_full |
Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| title_fullStr |
Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| title_full_unstemmed |
Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| title_sort |
detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probabilities ratio test |
| publisher |
Taylor's University |
| publishDate |
2023 |
| url |
http://psasir.upm.edu.my/id/eprint/107252/ https://jestec.taylors.edu.my/V18Issue2.htm |
| _version_ |
1814054626573418496 |
| score |
13.211869 |