计算机工程与应用2011,Vol.47Issue(22):96-98,3.DOI:10.3778/j.issn.1002-8331.2011.22.027
非参数PCUSUM算法DDoS攻击检测
DDoS attack detection based on non-parameter PCUSUM algorithm
摘要
Abstract
The paper aims at the sharp change of ratio of unacknowledged packets in victim end,presents an effective method of DDoS attack detection which can shorten the detection time on the premise of guarantee alarm correctness.Detecting TCP network flow at the victim end, in every time intervals the ratio of unacknowledged packets quantity and total packets is caculated,and in next time intervals the sequence value of last time intervalis is revised,and more accurate detecting sequence value is gotten.The non-parameter recursion PCUSUM algorithm is used to detect DDoS attack.Simulation experiment shows that the method has higher detection accuracy and can improve the rate of detection.关键词
DDoS攻击/PCUSUM算法/受害端检测/未确认报文段Key words
DDoS attack/PCUSUM algorithm/detection in victim end/unacknowledged packets分类
信息技术与安全科学引用本文复制引用
莫家庆,胡忠望,林瑜华..非参数PCUSUM算法DDoS攻击检测[J].计算机工程与应用,2011,47(22):96-98,3.基金项目
广东省高等学校人才引进专项项资金项目(the Talent Introduction Special Foundation Project of Guangdonng High School under Grant No.2010-343). (the Talent Introduction Special Foundation Project of Guangdonng High School under Grant No.2010-343)