Enhancement detection distributed denial of service attacks using hybrid n-gram techniques

Autor:	Andi Maslan, Kamaruddin Malik Mohamad, Cik Feresa Mohd Foozy
Rok vydání:	2022
Předmět:	Chi-square distance Payload N-grams Electrical and Electronic Engineering DDoS Malware
Zdroj:	TELKOMNIKA (Telecommunication Computing Electronics and Control). 20:61
ISSN:	2302-9293 1693-6930
DOI:	10.12928/telkomnika.v20i1.18103
Popis:	Distributeddenial of service (DDoS) attacks have always been a concern of cyber experts. To detect DDoS attacks, several methods can be used. One of the methods used in this research is the n-gram technique. The n-gram approach analyzes the payload of data packets that enter the network to obtain attack patterns. Data is captured and analyzed, after which it is compared with clean data packets. The chi-square distance value close to 1 indicates that the two packages are very similar so that the data packet is not an attack. A deal less than one means the data packet is categorized as an attack. In this research, the threshold for determining the attack level can be lowered to obtain a very high detection accuracy. As a result, the 2-gram technique has a detection accuracy rate with the lowest false positive value of around 13%, with the highest actual positive ratio reaching 99.98%.
Databáze:	OpenAIRE
Externí odkaz:	https://explore.openaire.eu/search/publication?articleId=doi_dedup___::e5f5f04e163c5c739953089e65927e60 https://doi.org/10.12928/telkomnika.v20i1.18103 Zobrazit plný text záznamu Plný text ve formátu PDF