T-CAD: A threshold based collaborative DDoS attack detection in multiple autonomous systems

Singh, Karanbir; Dhindsa, Kanwalvir Singh; Nehra, Deepa

doi:10.1016/j.jisa.2020.102457

Cited by 19 publications

(13 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…In this section, the results of the proposed method for the proposed dataset are mentioned. After multiple performances for different time periods, with different values of the parameter α for different ∅-entropies in the range (2)(3)(4)(5)(6)(7)(8)(9)(10) and considering the values of r to calculate different thresholds for each α, in the range of (-5-5), using the floodlight controller module, different results were obtained; in Tables 2 and 3, the best values obtained in terms of detection accuracy, are listed for different time periods and are obtained separately for each dataset.…”

Section: Results Of the Experimentsmentioning

confidence: 99%

“…In paper [8] , a system called T-CAD is proposed to detect and reduce threshold-based DDoS attacks. This method calculates the entropy of router flows.…”

Section: Related Workmentioning

confidence: 99%

“… FN: the number of attack flowsthat are incorrectly identified as normal flowsin this system.  Accuracy(AC): it examines the ratio of the number of classes of normal and attack flows that are correctly detected and calculates this ratio to the total number of classes according to (8).…”

Section: Performance Measurementioning

confidence: 99%

See 2 more Smart Citations

A Hybrid Mechanism to Detect DDoS Attacks in Software Defined Networks

Dehkordi

Aghaei

Boroujeni

2021

mjee

View full text Add to dashboard Cite

DDoS (Distributed Denial-of-Service) attacks are among the cyberattacks that are increasing day by day and have caused problems for computer network servers. With the advent of SDN networks, they are not immune to these attacks, and due to the software-centric nature of these networks, this type of attack can be much more difficult for them, ignoring effective parameters such as port and Source IP in detecting attacks, providing costly solutions which are effective in increasing CPU load, and low accuracy in detecting attacks are of the problems of previously presented methods in detecting DDoS attacks. Given the importance of this issue,the purpose of this paper is to increase the accuracy of DDoS attack detection using the second order correlation coefficient technique based on ∅-entropy according to source IP and selection of optimal features.To select the best features, by examining the types of feature selection algorithms and search methods, the WrapperSubsetEval feature selection algorithm, the BestFirst search method, and the best effective features were selected. This study was performed on CTU-13 and ISOT datasets and the results were compared with other methods. The accuracy of the detection in this work indicates the high efficiency of the proposed approach compared to other similar methods.

show abstract

Section: Results Of the Experimentsmentioning

confidence: 99%

“…In paper [8] , a system called T-CAD is proposed to detect and reduce threshold-based DDoS attacks. This method calculates the entropy of router flows.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

A Hybrid Mechanism to Detect DDoS Attacks in Software Defined Networks

Dehkordi

Aghaei

Boroujeni

2021

mjee

View full text Add to dashboard Cite

show abstract

“…Serangan Distributed Denial of Services (DDoS) terus menjadi salah satu ancaman paling menantang ke Internet. Intensitas dan frekuensi serangan ini meningkat dengan kecepatan yang mengkhawatirkan [5] Begitu seringnya serangan DoS terjadi menyebabkan banyak peneliti yang melakukan penelitian tentang serangan DoS di antaranya yaitu serangan pada sistem fisik [9], survey dan mitigasi serangan DoS pada Named Data Networking [10], eksplorasi bukti digital pada smart router [11], mitigasi serangan DoS yang efisien [12], deteksi DoS pada penerapan jaringan sensor nirkabel [13], deteksi serangan DDoS berbasis multiple autonomous systems [14], dan DDoS bandwidth flooding [15].…”

Section: Pendahuluanunclassified

Peningkatan Keamanan Router Mikrotik Terhadap Serangan Denial of Service (DoS)

2020

View full text Add to dashboard Cite

Denial of Service (DoS) attacks are one of the most common attacks on website, networks, routers and servers, including on router mikrotik. A DoS attack aims to render a network router unable to service requests from authorized users. The result will disrupt the operational activities of the organization and cause material and non-material losses. In this study, a simulation and analysis of DoS attacks using the Live Forensics method were carried out and the router security enhancement from rectangular software and hardware. From the research results obtained digital evidence of DoS attacks in the form of IP addresses and attacker activity logs. In addition, the increase in router security in terms of software by using Firewall Filter and Firewall Raw has proven effective in preventing attacks. While improving router security in terms of hardware by setting a reset button on the router and firewall devices is also very necessary so that the router can avoid physical attacks by irresponsible persons.

show abstract

“…The primary target of DDoS attack is availability of resources for genuine users. The malicious flooding overloads the network, exceeding its bandwidth capabilities and disrupting the services [4]. The target range varies from financial institutions, health care providers and government agencies to low key public networks [2].…”

Section: Introductionmentioning

confidence: 99%

Distributed Denial of Service (DDoS) Mitigation Using Blockchain—A Comprehensive Insight

et al. 2021

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attack is a major threat impeding service to legitimate requests on any network. Although the first DDoS attack was reported in 1996, the complexity and sophistication of these attacks has been ever increasing. A 2 TBps attack was reported in mid-August 2020 directed towards critical infrastructure, such as finance, amidst the COVID-19 pandemic. It is estimated that these attacks will double, reaching over 15 million, in the next 2 years. A number of mitigation schemes have been designed and developed since its inception but the increasing complexity demands advanced solutions based on emerging technologies. Blockchain has emerged as a promising and viable technology for DDoS mitigation. The inherent and fundamental characteristics of blockchain such as decentralization, internal and external trustless attitude, immutability, integrity, anonymity and verifiability have proven to be strong candidates, in tackling this deadly cyber threat. This survey discusses different approaches for DDoS mitigation using blockchain in varied domains to date. The paper aims at providing a comprehensive review, highlighting all necessary details, strengths, challenges and limitations of different approaches. It is intended to serve as a single platform to understand the mechanics of current approaches to enhance research and development in the DDoS mitigation domain.

show abstract

T-CAD: A threshold based collaborative DDoS attack detection in multiple autonomous systems

Cited by 19 publications

References 18 publications

A Hybrid Mechanism to Detect DDoS Attacks in Software Defined Networks

A Hybrid Mechanism to Detect DDoS Attacks in Software Defined Networks

Peningkatan Keamanan Router Mikrotik Terhadap Serangan Denial of Service (DoS)

Distributed Denial of Service (DDoS) Mitigation Using Blockchain—A Comprehensive Insight

Contact Info

Product

Resources

About