Fast and lightweight detection and filtering method for low-rate TCP targeted distributed denial of service (LDDoS) attacks

dc.contributor.authorŞimşek, Mehmet
dc.contributor.authorŞentürk, Arafat
dc.date.accessioned2020-05-01T12:10:03Z
dc.date.available2020-05-01T12:10:03Z
dc.date.issued2018
dc.departmentDÜ, Mühendislik Fakültesi, Bilgisayar Mühendisliği Bölümüen_US
dc.descriptionWOS: 000450984700011en_US
dc.description.abstractDetection and filtering of low-rate distributed denial of service (LDDoS) attacks is hard since their behavior is similar to legitimate users' behavior. In the literature, there are many filtering approaches and metrics for LDDoS attacks. However, most of the LDDoS detection methods in the literature only monitor congestion state. Actually, precongestion period that the attack has already started has valuable information about the attack. In this study, we proposed a method that uses precongestion period for metric calculation. Also, most of LDDoS filtering approaches have high false-positive and false-negative rates and also require long period of time for detection. Additionally, we developed an efficient method for detection and filtering of LDDoS attacks. According to the experimental results, the proposed LDDoS detection method has zero false-positive and false-negative rates under the scenarios; attack detection time is significantly reduced with using the proposed metric calculation approach. Also, the proposed method has a simple logic, and it requires simple calculations. This increases the applicability of the developed method.en_US
dc.identifier.doi10.1002/dac.3823en_US
dc.identifier.issn1074-5351
dc.identifier.issn1099-1131
dc.identifier.issue18en_US
dc.identifier.scopusqualityQ2en_US
dc.identifier.urihttps://doi.org/10.1002/dac.3823
dc.identifier.urihttps://hdl.handle.net/20.500.12684/5953
dc.identifier.volume31en_US
dc.identifier.wosWOS:000450984700011en_US
dc.identifier.wosqualityQ3en_US
dc.indekslendigikaynakWeb of Scienceen_US
dc.indekslendigikaynakScopusen_US
dc.language.isoenen_US
dc.publisherWileyen_US
dc.relation.ispartofInternational Journal Of Communication Systemsen_US
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanıen_US
dc.rightsinfo:eu-repo/semantics/closedAccessen_US
dc.subjectdistributed denial of service attacksen_US
dc.subjectinternet of thingsen_US
dc.subjectlightweight securityen_US
dc.subjectnetwork securityen_US
dc.titleFast and lightweight detection and filtering method for low-rate TCP targeted distributed denial of service (LDDoS) attacksen_US
dc.typeArticleen_US

Dosyalar

Orijinal paket
Listeleniyor 1 - 1 / 1
Küçük Resim Yok
İsim:
5953.pdf
Boyut:
770.07 KB
Biçim:
Adobe Portable Document Format
Açıklama:
Tam Metin / Full Text