Flooding attacks detection in backbone traffic using power divergence

Ali Makke, Osman Salem, Mohamad Assaad, Hassine Moungla, Ahmed Mehaoua
2012 Proceedings of the 7th ACM workshop on Performance monitoring and measurement of heterogeneous wireless and wired networks - PM2HW2N '12  
Flooding attacks detection in traffic of backbone networks requires generally the analysis of a huge amount of data with high accuracy and low complexity. In this paper, we propose a new scheme to detect flooding attacks in high speed networks. The proposed mechanism is based on the application of Power Divergence measures over Sketch data structure. Sketch is used for random aggregation of traffic, and Power Divergence is applied to detect deviations between current and established probability
more » ... distributions of network traffic. We focus on tuning the parameter of Power Divergence to optimize the performance. We evaluate our approach using real Internet traffic traces, obtained from MAWI trans-Pacific wide transit link between USA and Japan. Our results show that the proposed approach outperforms existing solutions in terms of detection accuracy and false alarm ratio.
doi:10.1145/2387191.2387195 dblp:conf/mswim/0002SAMM12 fatcat:56qbojt6urcvfaobxuisvmh5ga