Beta
256977

Time Series Similarity for Detecting DDoS Flooding Attack

Article

Last updated: 28 Dec 2024

Subjects

-

Tags

Mathematics and Computer Science

Abstract

Distributed Denial of Service attack (DDoS) is one of many types that hit computer networks. For security specialists, this attack is one of their main concerns. The DDoS flooding attack prevents the legitimate users from using their desired services by consuming the server resources. It includes many types depending on the targeted layer as example, SYN flooding attack and UDP attack are lunched into the network layer, while the HTTP flooding attack and DNS attack into the application layer. The DDoS flooding attack takes use of a flaw in the internet routing system by flooding the server with packets bearing faked IP addresses. Due to the internet routing infrastructure's inability to discriminate between spoofed and legitimate packets, using these spoofed IP addresses makes it difficult to detect this attack. Based on time series similarity measurement, we offer a new detection approach for DDoS flooding attacks in this paper. By computing the cost function value and by comparing this value with a modified adaptive threshold, legal and malicious traffic intervals can be clearly distinguished. Our results show the efficiency of the proposed detection approach through the obtained detection rates.

DOI

10.21608/aunj.2022.129373.1004

Keywords

DDoS Flooding, Time Series similarity, Dynamic Time Warping, Weighted Moving Average

Authors

First Name

Fatma

Last Name

Hussain

MiddleName

Abd-Alhaleem

Affiliation

Faculty of Computers and Information, Assiut University, Assiut, Egypt

Email

fatma.abdelhalem@aun.edu.eg

City

-

Orcid

-

First Name

Dalia

Last Name

Nashat

MiddleName

-

Affiliation

Faculty of Computers and Information, Assiut University, Assiut, Egypt

Email

dnashat@aun.edu.eg

City

Assiut

Orcid

-

Volume

51

Article Issue

3

Related Issue

36411

Issue Date

2022-09-01

Receive Date

2022-04-11

Publish Date

2022-09-01

Page Start

229

Page End

241

Print ISSN

2812-5029

Online ISSN

2812-5037

Link

https://aunj.journals.ekb.eg/article_256977.html

Detail API

https://aunj.journals.ekb.eg/service?article_code=256977

Order

256,977

Type

Novel Research Articles

Type Code

2,242

Publication Type

Journal

Publication Title

Assiut University Journal of Multidisciplinary Scientific Research

Publication Link

https://aunj.journals.ekb.eg/

MainTitle

Time Series Similarity for Detecting DDoS Flooding Attack

Details

Type

Article

Created At

23 Jan 2023