A Behavior-Based Detection Method for Outbreaks of Low-Rate Attacks

Low-rate attacks can conceal their traffic because their packets are at very low rates, which make it easy to bury themselves into the normal traffic. Thus, although a number of volume-based detection techniques are able to identify anomalies that trigger significant changes in traffic volume, they...

Full description

Saved in:
Bibliographic Details
Main Authors: Yaokai Feng, Hori, Y., Sakurai, K., Takeuchi, J.
Format: Conference Proceeding
Language:English
Subjects:
Anomaly detection
behavior-based method
Histograms
IP networks
Low-rate attack
Measurement
Monitoring
normal behavior mode
Proposals
Vectors
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Low-rate attacks can conceal their traffic because their packets are at very low rates, which make it easy to bury themselves into the normal traffic. Thus, although a number of volume-based detection techniques are able to identify anomalies that trigger significant changes in traffic volume, they are not applicable to detecting low-rate attacks. Because of this, the problem of low-rate attacks has been attracting many researchers in the community of network security. In this study, for the first time we propose a method based on the normal behavior mode of traffic to detect outbreaks of low-rate attacks. The experimental result indicates that our proposal is efficient.
DOI:10.1109/SAINT.2012.50