福建师范大学学报(自然科学版)2011,Vol.27Issue(5):34-39,6.
基于CUSUM的自适应攻击检测
A Self-adaptive Detecting Algorithm Based on CUSUM
摘要
Abstract
In order to detect DDoS attack in time and accurately, a detecting algorithm based-on CUSUM is proposed. Using the sensitivity of CUSUM algorithm to slight changes, the detecting algorithm take the proportion of sending packets to and outgoing packets from destination address as characteristic value. The algorithm can adjust expectations and alarm-threshold dynamically. It has good adaptability and can be applied to all kinds of network environment. The experimental results and analysis indicate that the algorithm can detect attack rapidly and accurately, also has good adaptability.关键词
DDoS/CUSUM算法/自适应攻击检测Key words
DDoS/ CUSUM algorithm/ adaptive attack detection分类
信息技术与安全科学引用本文复制引用
赖会霞,马剑波,张仕..基于CUSUM的自适应攻击检测[J].福建师范大学学报(自然科学版),2011,27(5):34-39,6.基金项目
福建省教育厅资助项目(JB10029) (JB10029)
福建省自然科学基金资助项目(2007J0315) (2007J0315)