基于Hurst指数方差分析的DDoS攻击检测方法

Detecting Method for DDoS Attack Based on Variance Analysis of Hurst Exponent

研究分布式拒绝服务(DDoS)攻击对网络自相似性的影响,提出一种通过计算Hurst指数方差检测DDoS攻击的方法,通过使用MIT的林肯实验室数据进行试验,得出DDoS攻击的判决条件。实验表明,该方法能检测DDoS攻击引起的Hurst指数方差的变化,其检测率比传统的特征匹配方法高出8%,误报率比自相似性检测方法低了3%。

This paper studies the change of the self-similarity caused by DDoS attack, and proposes a method to detect DDoS attack by calculating the variance of Hurst exponent. An experiment with the dataset of MIT Lincoln Laboratory is conducted to obtain the adjust criterion of DDoS attack. It shows that the proposed method can detect DDoS attack caused by changed variance of Hurst exponent and has higher detection efficiency. Its detection rate is 8% higher than the traditional method of feature matching, while the false alarm rate is 3% lower than the self-similar detecting method.