Based on Hurst Parameter Estimation DoS Detection

Abstract:

Most researches regard the real traffic has self_similarity,so traditional model based passion or Markov can’t adapt to the real traffic.In order to resolve these problems,the estimation is used based on Hurst parameter to detect DoS attack,researching on the affect of Hurst paramerter change brought by DoS attack,By analyzing the 1998 DARPA intrusion detection evaluation dataset show that this method detect DoS attack,and is more reliable on the recognition of all kinds of DoS attack than any other method based on measure precision.

• Periodical: Applied Mechanics and Materials (Volumes 303-306)
• Pages: 2325-2328
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.303-306.2325
• Online since: February 2013
• Authors: Heng Shu
• Keywords: Denial of Service (DoS) Attack, Hurst Parameter, Network Traffic, Self-Similarity

References

[1] Kendall K. A database of computer attacks for the evaluation of intrusion detection systems[D]. Boston: Massachusetts Instituteof Technology, (1999).

[2] Zhang Xueqin, Gu Chunhua, Lin Jiajun. The challenge and development of intrusion detection technology in [J]. computer engineering and design, 2004, 25 ( 7): 1096-1099.

[3] Park K, Willinger W. Self-similar network traffic: An overview, self-similar network traffic and performance evaluation[C], NewYork: Wiley-Interscience, 2000. 1-39.

DOI: 10.1002/047120644x.ch1

[4] Abry P, Flandrin P, Taqqu MS, et al. Wavelets for the analysis, es-timation and synthesis of scaling data[Z]. Boston, 2000. 134-156.

[5] Morris R, Lin D. Variance of aggregated web traffic[C]. Procee-dings of IEEE INFOCOM 2000. 360-366.

[6] Kettani H. A novel approach to the estimation of the long-range dependence parameter [D]. University of Wisconsin-Madison, (2000).

[7] Zhang Jianzhong, Xu Jingdong, Phil into a book, and so on. Extensible anomaly detection system based on Realization of [J]. computer engineering and design, 2005, 26 ( 7): 1722-1725.

[8] Peng Xinguang, Ma Xiaoli. The session attribute optimization network anomaly detection model of [J]. computing Computer engineering and design, 2005, 26 ( 11): 2945-2948.