Artificial Neural Networks in the Detection of Known and Unknown DDoS Attacks: Proof-of-Concept

Research output: Chapter in Book/Report/Conference proceedingChapterpeer-review

10 Citations (Scopus)

Abstract

A Distributed Denial of Service attack (DDoS) is designed to overload a target device and its networks with packets to damage its resources or services. This paper proposes an Artificial Neural Network (ANN) detection engine to flag known and unknown attacks from genuine traffic. Based on experiments and data analysis, specific patterns are selected to separate genuine from DDoS packets, thus allowing normal traffic to reach its destination. The mitigation process is triggered when the detection system identifies attacks based on the known characteristic features (patterns) that were fed to the ANN during the training process. Such characteristic patterns separate attacks from normal traffic. We have evaluated our solution against related work based on accuracy, sensitivity, specificity and precision.

Original languageEnglish
Title of host publicationCommunications in Computer and Information Science
PublisherSpringer-Verlag Berlin Heidelberg
Pages300-320
Number of pages21
Volume430
ISBN (Print)9783319077666
DOIs
Publication statusPublished - 2014

Publication series

NameCommunications in Computer and Information Science
Volume430
ISSN (Print)18650929

Keywords

  • ANN
  • characteristic features (patterns)
  • forged packets
  • known and unknown DDoS attacks
  • Snort-AI
  • training process

Fingerprint

Dive into the research topics of 'Artificial Neural Networks in the Detection of Known and Unknown DDoS Attacks: Proof-of-Concept'. Together they form a unique fingerprint.

Cite this