针对LTE-A网络中的DDoS攻击流量检测模型

A DDoS attack detection model for LTE-A network

近年来, 4GLTE-A技术发展迅猛,移动设备的普及以及各种承载于4G网络的业务和应用已经成为我们日常不可或缺的部分。但网络攻击技术也不断的在发展,特别是近年来针对4G LTE-A网络的攻击技术的不断演进,已成为危害人们切身利益的关键问题。DDoS作为DoS攻击的一种,对网络带来了更大的危害,因此需要研究一种攻击检测模型。文章提出了一个针对LTE-A网络中的DDoS攻击流量检测模型,模型利用熵作为特征之一,并使用随机森林算法训练模型分类器,可将其部署在eNB上对流经该eNB的DDoS流量进行识别。通过验证,所提出的模型的检测准确率可达99.956%。

In recent years, 4G LTE-A technology has developed rapidly, and the popularity of mobile devices and various services based on 4G networks have become an indispensables part of our daily life. However, attack means is also constantly developing. The continuous evolution of attack means for 4G LTE-A networks in recent years has become a key issue that threatens our legal right. DDoS is a kind of denial of service attack, which brings more harm. Therefore, it is necessary to study an attack detection model. In this paper, a DDoS attack detection model for LTE-A network has been proposed. The model uses entropy as one of the features and uses random forest algorithm to train a classifier which can be equipped on an eNB to recognize the DDoS flow through the eNB. The experiment result shows that the detection accuracy of the proposed model can reach to 99.956%.