Name
Abstract | ||
|---|---|---|
Denial of Service (DoS) attack poses a severe threat to the Internet. Entropy-based methods have been successfully used to detect specific types of malicious traffic. This paper presents a novel dynamic entropy-based model for the detection of DoS attack. Based on the theory of alive communication, the dynamic entropy model is constructed by combining the information entropy as well as the feature of netflow conversation correlation. This is the first application of the theory of alive communication in the network anomalies detection. To evaluate the performance of the dynamic entropy model, we compare it with the traditional information entropy model. The experiment results demonstrate the presence of traffic's dynamic entropy and show that the dynamic entropy keeps stable under normal traffic. By contrast, it fluctuates significantly when the network subjects to DoS attacks. Moreover, the detection rate of dynamic entropy-based model is higher and can detect unknown DoS attacks effectively. |
Year | DOI | Venue |
|---|---|---|
2013 | 10.1016/j.compeleceng.2013.05.003 | Computers & Electrical Engineering |
Keywords | Field | DocType |
dos attack,detection rate,information entropy,dynamic entropy model,novel dynamic entropy-based model,traditional information entropy model,alive communication,dos attack detection method,dynamic entropy-based model,dynamic entropy,unknown dos attack | Data mining,Denial-of-service attack,Computer science,NetFlow,Real-time computing,Entropy (information theory),The Internet | Journal |
Volume | Issue | ISSN |
39 | 7 | 0045-7906 |
Citations | PageRank | References |
4 | 0.45 | 13 |
Authors | ||
4 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Jianqi Zhu | 1 | 62 | 5.74 |
| Fu Feng | 2 | 4 | 0.45 |
| Yin Ke-Xin | 3 | 4 | 1.13 |
| Liu Yan-Heng | 4 | 4 | 0.45 |