A Review on Hot-IP Finding Methods and Its Application in Early DDoS Target Detection

On the high-speed connections of the Internet or computer networks, the IP (Internet Protocol) packet traffic passing through the network is extremely high, and that makes it difficult for network monitoring and attack detection applications. This paper reviews methods to find the high-occurrence-fr...

Full description

Saved in:
Bibliographic Details
Published in:Future internet 2016-12, Vol.8 (4), p.52-52
Main Authors: Hoang, Xuan Dau, Pham, Hong Ky
Format: Article
Language:English
Subjects:
Algorithms
Computer information security
Count-Min
Count-Sketch
Data transmission
DDoS attack detection
Denial of service attacks
Group Testing
Hackers
Internet
Internet Protocol
Internet service providers
IP (Internet Protocol)
Methods
Network security
Networks
Packet switched networks
Packets (communication)
Routers
Statistical analysis
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:On the high-speed connections of the Internet or computer networks, the IP (Internet Protocol) packet traffic passing through the network is extremely high, and that makes it difficult for network monitoring and attack detection applications. This paper reviews methods to find the high-occurrence-frequency elements in the data stream and applies the most efficient methods to find Hot-IPs that are high-frequency IP addresses of IP packets passing through the network. Fast finding of Hot-IPs in the IP packet stream can be effectively used in early detection of DDoS (Distributed Denial of Service) attack targets and spreading sources of network worms. Research results show that the Count-Min method gives the best overall performance for Hot-IP detection thanks to its low computational complexity, low space requirement and fast processing speed. We also propose an early detection model of DDoS attack targets based on Hot-IP finding, which can be deployed on the target network routers.
ISSN:1999-5903
1999-5903
DOI:10.3390/fi8040052