Visible to the public User behaviour modelling based DDoS attack detection

TitleUser behaviour modelling based DDoS attack detection
Publication TypeConference Paper
Year of Publication2014
AuthorsCepheli, O., Buyukcorak, S., Kurt, G.K.
Conference NameSignal Processing and Communications Applications Conference (SIU), 2014 22nd
Date PublishedApril
KeywordsAdaptation models, anomaly detection, Computer crime, computer network security, Conferences, DDoS, DDoS attack detection, destination IP traffic, distributed denial of service, EM, expectation maximization, human factors, IP networks, Mathematical model, network system, Signal processing, telecommunication traffic, user behaviour modelling, user modeling, user modelling

Distributed Denial of Service (DDoS) attacks are one of the most important threads in network systems. Due to the distributed nature, DDoS attacks are very hard to detect, while they also have the destructive potential of classical denial of service attacks. In this study, a novel 2-step system is proposed for the detection of DDoS attacks. In the first step an anomaly detection is performed on the destination IP traffic. If an anomaly is detected on the network, the system proceeds into the second step where a decision on every user is made due to the behaviour models. Hence, it is possible to detect attacks in the network that diverges from users' behavior model.

Citation Key6830697