Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
My Menu
Saved Items

Effective DDoS Attacks Detection Using Generalized Entropy Metric

Ke Li17 Contact Information, Wanlei Zhou17 Contact Information, Shui Yu17 Contact Information and Bo Dai18 Contact Information

(17)  School of Engineering and Information Technology, Deakin University,  
(18)  School of Computer Science and Engineering, University of Electronic Science and Technology of China,  
Abstract
In information theory, entropies make up of the basis for distance and divergence measures among various probability densities. In this paper we propose a novel metric to detect DDoS attacks in networks by using the function of order α of the generalized (Rényi) entropy to distinguish DDoS attacks traffic from legitimate network traffic effectively. Our proposed approach can not only detect DDoS attacks early (it can detect attacks one hop earlier than using the Shannon metric while order α=2, and two hops earlier to detect attacks while order α=10.) but also reduce both the false positive rate and the false negative rate clearly compared with the traditional Shannon entropy metric approach.

Keywords  DDoS - generalized entropy - attacks detection


Contact Information Ke Li
Email: ktql@deakin.edu.au

Contact Information Wanlei Zhou
Email: wanlei@deakin.edu.au

Contact Information Shui Yu
Email: syu@deakin.edu.au

Contact Information Bo Dai
Email: db804@163.com
Fulltext Preview (Small, Large)
Image of the first page of the fulltext

References secured to subscribers.



Export this chapter
Export this chapter as RIS | Text
 
Remote Address: 38.107.191.110 • Server: mpweb18
HTTP User Agent: CCBot/1.0 (+http://www.commoncrawl.org/bot.html)