Asset Details
Do you wish to reserve the book?
HIDDEN SEMI-MARKOV MODEL FOR DETECTING APPLICATION LAYER DDOS ATTACKS
Hey, we have placed the reservation for you!
By the way, why not check out events that you can attend while you pick your title.
Oops! Something went wrong.
Looks like we were not able to place the reservation. Kindly try again later.
Are you sure you want to remove the book from the shelf?
HIDDEN SEMI-MARKOV MODEL FOR DETECTING APPLICATION LAYER DDOS ATTACKS
Do you wish to request the book?
HIDDEN SEMI-MARKOV MODEL FOR DETECTING APPLICATION LAYER DDOS ATTACKS
Please be aware that the book you have requested cannot be checked out. If you would like to checkout this book, you can reserve another copy
We have requested the book for you!
Your request is successful and it will be processed during the Library working hours. Please check the status of your request in My Requests.
Oops! Something went wrong.
Looks like we were not able to place your request. Kindly try again later.
Journal Article
HIDDEN SEMI-MARKOV MODEL FOR DETECTING APPLICATION LAYER DDOS ATTACKS
2012
Overview
Distributed denials of Service attacks (DDoS) have become one of the major threat on the internet. Most defence methods are focused on detecting DDoS attack on IP & TCP layer instead of application layer. With profiling of web browsing behaviour, the sequence order of web page request can be used for detecting Application layer DDoS (App_DDoS) attacks. Based on Hidden semi-Markov model (HsMM) ,a novel anomaly detector is used to describe the browsing behaviour of web users. Average Information entropy (AIE) of user's HTTP request sequence used as a criterion to measure the user's normality. K-means algorithm derived for on line implementation of the model based on M-algorithm. The proposed method is experimentally confirmed with various types of new App-DDoS attack .Our experiment shows the detector and the filter that are based on the behavior model. The filter, residing between the Internet and the victim, takes in a HTTP request and decides whether to accept or reject (drop) it. If a request is accepted, it can pass through the filter and reach the victim. [PUBLICATION ABSTRACT]
Publisher
I A E T Publishing Company
Subject
