利用边际谱Hurst参数检测DDoS攻击

doi:10.13190/jbupt.201105.128.zhengkf

北京邮电大学学报 ›› 2011, Vol. 34 ›› Issue (5): 128-132.doi: 10.13190/jbupt.201105.128.zhengkf

• 研究报告 • 上一篇

利用边际谱Hurst参数检测DDoS攻击

郑康锋¹,王秀娟²

1.北京邮电大学计算机学院, 北京 100876; 2.北京工业大学计算机学院, 北京 100124

收稿日期:2010-12-05 修回日期:2011-03-30 出版日期:2011-10-28 发布日期:2011-08-26
通讯作者: 王秀娟 E-mail:xjwang@bjut.edu.cn
基金资助:
国家自然科学基金项目（61070204,61070208）；国家科技重大专项项目（2011ZX0300200501）

Detecting DDoS Attack with Hurst Parameter of Marginal Spectrum

ZHENG Kang-feng¹,

Received:2010-12-05 Revised:2011-03-30 Online:2011-10-28 Published:2011-08-26

摘要/Abstract

摘要：

为了有效检测分布式拒绝服务(DDoS)攻击，提出对网络流量信号进行希尔伯〖JP9〗特-〖JP〗黄变换(HHT)，得到相应的边际谱，计算边际谱的Hurst参数. 以最大化综合指数为目标，训练实验数据的边际谱Hurst取值，得到检测阈值，通过与该阈值的大小进行比较判断是否有DDoS攻击发生. 实验结果表明该方法具有一定的检测效果. 

关键词: DDoS检测, 希尔伯特-黄变换, 边际谱, Hurst参数

Abstract:

In order to detect distributed denial of service (DDoS) attack effectively, a new method is described. Firstly, HilbertHuang transform (HHT) is introduced into the process of network traffic signal to obtain corresponding marginal spectrum. Then its Hurst parameter is calculated. Next, the detection threshold is determined by means of training Hurst parameters of marginal spectrums of experimental data with the goal of seeking the maximum composite index. Finally it can be judged whether DDoS attack happened or not through comparison with above threshold. Experimental results verified the feasibility of this method.

Key words: distributed denial of service detection, HilbertHuang transformation, marginal spectrum, hurst parameter

中图分类号:

TP309

郑康锋,王秀娟. 利用边际谱Hurst参数检测DDoS攻击[J]. 北京邮电大学学报, 2011, 34(5): 128-132.

ZHENG Kang-feng. Detecting DDoS Attack with Hurst Parameter of Marginal Spectrum[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2011, 34(5): 128-132.

参考文献

[1] Yang Minghui, Wang Ruchuan. DDoS detection based on wavelet kernel support vector machine [J]. The Journal of China Universities of Posts and Telecommunications, 2008, 15(3): 59-63.
[2] Li M, Jiang X. DDoS attacks detection model and its application [J]. WSEAS Transactions on Computers, 2008, 7(8): 1159-1168.
[3] Li Muhai, Li Ming. A new approach for detecting DDoS attacks based on wavelet analysis//Proceedings of the 2^nd International Congress on Image and Signal Processing (CISP ’09). 2009.
[4] Li Muhai, Li Ming. An adaptive approach for defending against DDoS attacks[J]. Mathematical Problems in Engineering, 2010, Article ID 570940, doi: 10.1155/2010/570940.
[5] 何慧, 张宏莉, 张伟哲, 等. 一种基于相似度的 DDoS 攻击检测方法[J]. 通信学报, 2004, 25(7): 176-184. He Hui, Zhang Hongli, Zhang Weizhe, et al. A DDoS intrusion detection method based on likeness [J]. Journal of China Institute of Communications, 2004, 25(7) : 176-184.
[6] Xiang Y, Lin Y, Lei W L, et al. Detecting DDOS attack based on network self-similarity [J]. IEE Proceedings Communications, 2004: 292-295.
[7] Xia Zhengmin, Lu Songnian, Tang Junhua. Note on studying change point of LRD traffic based on Li’s detection of DDoS flood attacking[J]. Mathematical Problems in Engineering, 2010, Article ID 962435, doi: 10.1155/2010/962435.
[8] 王欣, 方滨兴. Hurst参数变化在网络流量异常检测中的应用[J]. 哈尔滨工业大学学报, 2005, 37(9): 1046-1049. Wang Xin, Fang Binxing. An exploratory development on the Hurst parameter variety of network traffic abnormity signal [J]. Journal of Harbin Institute of Technology, 2005, 37(9): 1046-1049.
[9] 雷剑刚, 吴洲. 网络性能测量技术的研究[J]. 福建电脑, 2006, 5: 59-60. Lei Jiangang, Wu Zhou. Research on measuring technology of network performance[J]. Fujian Computer, 2006, 5: 59-60.
[10] 于德介, 程军圣, 杨宇. 机械故障诊断的Hilbert-Huang变换方法[M]. 北京: 科学出版社, 2006: 24-46.
[11] 史美林, 钱俊, 许超. 入侵检测系统数据集评测研究[J]. 计算机科学, 2006, 33(8): 1-8. Shi Meilin, Qian Jun, Xu Chao. Research of intrusion detection system dataset evaluation[J]. Computer Science, 2006, 33( 8): 1-8.

利用边际谱Hurst参数检测DDoS攻击

Detecting DDoS Attack with Hurst Parameter of Marginal Spectrum

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 2

编辑推荐

Metrics

本文评价

[1]	吕兴凤, 李金宝. 一种利用随机森林方法检测睡眠呼吸暂停的研究[J]. 北京邮电大学学报, 2020, 43(5): 64-70.
[2]	吴启武. 基于分形理论的物联网分层业务模型与性能分析[J]. 北京邮电大学学报, 2012, 35(4): 38-41.