计算机应用研究2011，Vol.28Issue(2)：717-719,3.DOI:10.3969/j.issn.1001-3695.2011.02.088
基于用户行为分析的应用层DDoS攻击检测方法
Detecting application-layer DDoS attack based on analysis of users' behaviors
摘要
Abstract
Compared with traditional DDoS attack, application-layer DDoS attack has more destructiveness and becomes harder to be detected and defense. Based on user browsing behavior analysis, this paper presented a method for detecting application layer DDoS attacks using auto-regression model. It adopted AR model and Kalman filtering to learn and predict normal user access, the results of which were advancedly used to judge abnormal. The routers were capable of limiting or blocking the attack traffic after locating the attack source accurately. The test result in China Telecom Internet Data Center shows that the method is effective.关键词
拒绝服务攻击/应用层/用户行为/自回归模型分类
信息技术与安全科学引用本文复制引用
赵国锋,喻守成,文晟..基于用户行为分析的应用层DDoS攻击检测方法[J].计算机应用研究,2011,28(2):717-719,3.基金项目
重庆市自然科学基金重点资助项目(CSTC2009BA2089) （CSTC2009BA2089）
重庆市高校优秀成果转化项目(KJzh08209) （KJzh08209）
