TIIS (한국인터넷정보학회)
Current Result Document :
| 한글제목(Korean Title) |
Traffic Seasonality aware Threshold Adjustment for Effective Source-side DoS Attack Detection |
| 영문제목(English Title) |
Traffic Seasonality aware Threshold Adjustment for Effective Source-side DoS Attack Detection |
| 저자(Author) |
Giang-Truong Nguyen
Van-Quyet Nguyen
Sinh-Ngoc Nguyen
Kyungbaek Kim
|
| 원문수록처(Citation) |
VOL 13 NO. 05 PP. 2651 ~ 2673 (2019. 05) |
한글내용
(Korean Abstract) |
|
영문내용
(English Abstract) |
In order to detect Denial of Service (DoS) attacks, victim-side detection methods are used popularly such as static threshold-based method and machine learning-based method. However, as DoS attacking methods become more sophisticated, these methods reveal some natural disadvantages such as the late detection and the difficulty of tracing back attackers. Recently, in order to mitigate these drawbacks, source-side DoS detection methods have been researched. But, the source-side DoS detection methods have limitations if the volume of attack traffic is relatively very small and it is blended into legitimate traffic. Especially, with the subtle attack traffic, DoS detection methods may suffer from high false positive, considering legitimate traffic as attack traffic. In this paper, we propose an effective source-side DoS detection method with traffic seasonality aware adaptive threshold. The threshold of detecting DoS attack is adjusted adaptively to the fluctuated legitimate traffic in order to detect subtle attack traffic. Moreover, by understanding the seasonality of legitimate traffic, the threshold can be updated more carefully even though subtle attack happens and it helps to achieve low false positive. The extensive evaluation with the real traffic logs presents that the proposed method achieves very high detection rate over 90% with low false positive rate down to 5%.
|
| 키워드(Keyword) |
DoS attack
DoS detection
source-side detection
adaptive threshold
traffic seasonality
|
| 파일첨부 |
PDF 다운로드
|
