|
| 基于改进的候选组合频繁模式的LDoS攻击检测 |
| Detecting LDoS Attacks based on Improved Candidate Combination Frequent Pattern |
| |
| DOI：10.3969/j.issn.1671-5322.2011.02.013 |
| 中文关键词: 频繁模式 低速率拒绝服务攻击 TCP拥塞控制 数据挖掘 |
| 英文关键词: Frequent Pattern LDoS TCP congestion control DataMining |
| 基金项目:安徽省自然科学研究项目，安徽科技学院青年科研基金项目 |
|
| 摘要点击次数: 4187 |
| 全文下载次数: 3763 |
| 中文摘要: |
| 低速率拒绝服务(LDoS)也被称为脉冲式拒绝服务,在攻击检测与防范方法上计算复杂、难以实现.针对此问题,分析了针对TCP拥塞控制机制的LDoS的数据流分布特性,通过设置流信息熵阈值定位出可疑IP流对,采用改进的候选组合频繁模式挖掘算法,将候选频繁端口模式在FP树路径中进行匹配来发现LDoS攻击及其攻击特性.仿真实验表明,该方法能够有效的检测LDoS攻击. |
| 英文摘要: |
| Low-rate Denial-of-Service(LDoS) is a new breed of DoS attack with periodic pulse,very different form traditional flooding DoS attacks.It’s more difficult to be detected and defensed.The LDoS attack traffic was simulated and generated of normal TCP flow.A new detection way is put forward based on Candidate Combination Frequent Pattern Mining algorithm.Simulation experiments show that the detection approaches of LDoS can reach high detection accuracy. |
|
查看全文
查看/发表评论 下载PDF阅读器 |
| 关闭 |