Litcius/Paper detail

A New Detection Method for Distributed Denial-of-Service Attack Traffic based on Statistical Test

Chin‐Ling Chen

2020Zenodo (CERN European Organization for Nuclear Research)29 citationsDOIOpen Access PDF

Abstract

Abstract: This study has proposed a new detection method for DDoS attack traffic based on two-sample t-test. We first investigate the statistics of normal SYN arrival rate (SAR) and confirm it follows normal distribution. The proposed method identifies the attack by testing 1) the difference between incoming SAR and normal SAR, and 2) the difference between the number of SYN and ACK packets. The experiment results show that the possibilities of both false positives and false negatives are very low. The proposed mechanism is also demonstrated to have the capability of detecting DDoS attack quickly.

Topics & Concepts

Denial-of-service attackComputer scienceTest (biology)Computer securityDenialComputer networkPsychologyWorld Wide WebGeologyThe InternetPsychoanalysisPaleontologyNetwork Security and Intrusion DetectionInternet Traffic Analysis and Secure E-votingAdvanced Malware Detection Techniques
A New Detection Method for Distributed Denial-of-Service Attack Traffic based on Statistical Test | Litcius