Please use this identifier to cite or link to this item: https://idr.l1.nitk.ac.in/jspui/handle/123456789/15649
Full metadata record
DC FieldValueLanguage
dc.contributor.authorPraseed
dc.contributor.authorAmit; Thilagam
dc.contributor.authorP. Santhi
dc.date.accessioned2021-05-05T10:27:35Z-
dc.date.available2021-05-05T10:27:35Z-
dc.date.issued2021
dc.identifier.citationIEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY Vol. 16 , , p. 617 - 626en_US
dc.identifier.urihttps://doi.org/10.1109/TIFS.2020.3017928
dc.identifier.urihttp://idr.nitk.ac.in/jspui/handle/123456789/15649-
dc.description.abstractAsymmetric application layer DDoS attacks using computationally intensive HTTP requests are an extremely dangerous class of attacks capable of taking down web servers with relatively few attacking connections. These attacks consume limited network bandwidth and are similar to legitimate traffic, which makes their detection difficult. Existing detection mechanisms for these attacks use indirect representations of actual user behaviour and complex modelling techniques, which leads to a higher false positive rate (FPR) and longer detection time, which makes them unsuitable for real time use. There is a need for simple, efficient and adaptable detection mechanisms for asymmetric DDoS attacks. In this work, an attempt is made to model the actual behavioural dynamics of legitimate users using a simple annotated Probabilistic Timed Automata (PTA) along with a suspicion scoring mechanism for differentiating between legitimate and malicious users. This allows the detection mechanism to be extremely fast and have a low FPR. In addition, the model can incrementally learn from run-time traces, which makes it adaptable and reduces the FPR further. Experiments on public datasets reveal that our proposed approach has a high detection rate and low FPR and adds negligible overhead to the web server, which makes it ideal for real time use.en_US
dc.titleModelling Behavioural Dynamics for Asymmetric Application Layer DDoS Detectionen_US
dc.typeArticleen_US
Appears in Collections:1. Journal Articles

Files in This Item:
There are no files associated with this item.


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.