Title: A learning-based hybrid framework for detection and defence of DDoS attacks

Authors: T. Subbulakshmi

Addresses: School of Computing Science and Engineering, VIT University, Chennai, Tamil Nadu, India

Abstract: Distributed denial of service (DDoS) attacks are those which deplete the valuable resource available for the legitimate user and reduces the business value of any web service provided. This sort of cyber-attacks has to be detected and respective actions have to be taken on them. An integrated detection and defensive mechanism is proposed in this paper to generate and detect DDoS attacks using machine learning algorithms such as back propagation neural network (BPNN), self-organising map (SOM) and enhanced support vector machine (ESVM) and to identify the real IP address of the spoofed attack source using the entropy-based defensive mechanism. The detection and defence mechanism are found to be effective in identifying the attack source with 99% accuracy using ESVM and response time of less than two seconds using the entropy-based tracing scheme. The real source of attacks is filtered using the IP tables to defend the DDoS attacks.

Keywords: DDoS attacks; attack source identification; IP addresses; entropy based defence; back propagation neural networks; BPNN; self-organising maps; SOM; enhanced SVM; support vector machines; ESVM; machine learning; distributed DoS; denial of service; cyberattacks.

DOI: 10.1504/IJIPT.2017.083036

International Journal of Internet Protocol Technology, 2017 Vol.10 No.1, pp.51 - 60

Received: 04 Sep 2015
Accepted: 18 May 2016
Published online: 18 Mar 2017 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article