A Lightweight Snapshot-Based DDoS Detector - LAAS-Réseaux et Communications Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

A Lightweight Snapshot-Based DDoS Detector

Résumé

Despite the efforts made from both the research community and the industry in inventing new methods to deal with distributed denial of service attacks, they stay a major threat in the Internet network. Those attacks are numerous, and can prevent, in most serious cases, the targeted system from answering any request from its clients. Detecting such attacks means dealing with several difficulties, such as their distributed nature or the several evasions techniques available to the attackers. The detection process has also a cost, which includes both the resources needed to perform the detection and the work of the network administrator. In this paper we introduce AATAC (Autonomous Algorithm for Traffic Anomaly Detection), an unsupervised DDoS detector that focuses on reducing the computational resources needed to process the traffic. It models the traffic using a set of regularly created snapshots. Each new snapshot is compared to this model using a k-NN based measure to detect significant deviations toward the usual traffic profile. Those snapshots are also used to provide the network administrator with an explicit and dynamic view of the traffic when an anomaly occurs. Our evaluation shows that AATAC is able to efficiently process real traces with low computational resources requirements, while achieving an efficient detection producing a low number of false-positives.
Fichier principal
Vignette du fichier
cnsm2017.pdf (559.81 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01676810 , version 1 (06-01-2018)

Identifiants

  • HAL Id : hal-01676810 , version 1

Citer

Gilles Roudiere, Philippe Owezarski. A Lightweight Snapshot-Based DDoS Detector. 13th International Conference on Network and Service Management (CNSM 2017), Nov 2017, Tokyo, Japan. 16p. ⟨hal-01676810⟩
234 Consultations
11 Téléchargements

Partager

Gmail Facebook X LinkedIn More