资料下载
×
一种基于改进的滑动平均滤波器的DDoS攻击检测方法
消耗积分:2 |
格式:rar |
大小:145 |
2009-06-17
贾虎世
分享资料个
本文通过对网络流量统计的分析，提出了一种基于滑动平均滤波器的DDoS 攻击检测
方法。该方法不同于以往单一根据网络流量的突变或根据攻击对流量分布的影响来分析
DDOS 攻击的方法，而是通过运用滑动平均滤波技术将两者综合考虑。该方法即适合引起网络流量突变的攻击，又适合发现大流量背景下攻击流量并没有引起整个网络流量显著变化的攻击。因此适合于各种规模的网络流量的异常检测。另外，详细给出了对检测成功率和误报率起着至关重要作用的阀值范围。
关键字：滑动平均滤波器；分布式拒绝服务攻击；检测率；误报率
【Abstract】In this paper we proposes a DDoS intrusion detection method based improved slip average fliter through analyzing statistical characteristics of network traffic. Our method is
different from not noly that based on burst net flow singly but also that based on impact of the traffic distribution singly. We consider both of them. So it can find out the DDos attack both which can burst net flow and which does not arouse the quick changes of network traffic against the large scale network traffic. In addition ,we also give out arrange of threshold value which is very
important to helping us to get high identification probability and low false alarm probability.
【Keywords】slip average filter ,distributed denial of service, identification probability, false
alarm probability
方法。该方法不同于以往单一根据网络流量的突变或根据攻击对流量分布的影响来分析
DDOS 攻击的方法，而是通过运用滑动平均滤波技术将两者综合考虑。该方法即适合引起网络流量突变的攻击，又适合发现大流量背景下攻击流量并没有引起整个网络流量显著变化的攻击。因此适合于各种规模的网络流量的异常检测。另外，详细给出了对检测成功率和误报率起着至关重要作用的阀值范围。
关键字：滑动平均滤波器；分布式拒绝服务攻击；检测率；误报率
【Abstract】In this paper we proposes a DDoS intrusion detection method based improved slip average fliter through analyzing statistical characteristics of network traffic. Our method is
different from not noly that based on burst net flow singly but also that based on impact of the traffic distribution singly. We consider both of them. So it can find out the DDos attack both which can burst net flow and which does not arouse the quick changes of network traffic against the large scale network traffic. In addition ,we also give out arrange of threshold value which is very
important to helping us to get high identification probability and low false alarm probability.
【Keywords】slip average filter ,distributed denial of service, identification probability, false
alarm probability
声明：本文内容及配图由入驻作者撰写或者入驻合作网站授权转载。文章观点仅代表作者本人，不代表电子发烧友网立场。文章及其配图仅供工程师学习之用，如有内容侵权或者其他违规问题，请联系本站处理。 举报投诉
评论(0)
发评论
- 相关下载
- 相关文章
