Detection of Internet‐wide traffic redirection attacks using machine learning techniques

Autor: Ana Subtil, M. Rosário Oliveira, Rui Valadas, Paulo Salvador, António Pacheco
Jazyk: angličtina
Rok vydání: 2023
Předmět:
Zdroj: IET Networks, Vol 12, Iss 4, Pp 179-195 (2023)
Druh dokumentu: article
ISSN: 2047-4962
2047-4954
DOI: 10.1049/ntw2.12085
Popis: Abstract Internet‐wide traffic redirection attacks have been reported for long, and are mainly caused by Border Gateway Protocol route hijacking. Such attacks can be quite harmful, impairing access to popular Internet sites for long periods. This work addresses the use of machine learning techniques (both unsupervised and supervised) leveraging from a distributed monitoring infrastructure of probes that measure the round trip time to Internet sites under surveillance. The detection process is separated into two stages: per‐probe classification and a combination of individual probe decisions. Our results show that the best strategy is to classify using an unsupervised technique based on Tukey's method and to combine using Hidden Markov Models, due to its performance and adaptability to different attack types.
Databáze: Directory of Open Access Journals
Externí odkaz: