摘要
该文提出了一种基于非线性预处理网络流量预测方法NLPP(Non-Linear Preprocessing Network Traffic Prediction)的分布式拒绝服务DDoS攻击检测算法,该算法是在分析DDoS攻击的网络流量特性基础上提出的,由一个基本检测算法和一个非线性预处理网络流量预测方法组成.通过与两种经典算法———基于VTP的检测算法和基于小波分析的检测算法对比分析,证明文中提出的算法有比这两种经典算法更高效的检测结果.只要参数选取合适,该算法可以达到100%的检到率和100%的正确率.该算法在引入非线性预处理网络流量预测方法NLPP后,大大缩短了检测延迟,可以很好地实时检测DDoS攻击.
This paper presents an algorithm based on NLPP（Non-linear Preprocessing Network Traffic Prediction） for detection of DDoS attack.The algorithm,which is brought up based on the network characteristics on DDoS attack,consists of a basic detection method and a NLPP method.Compared to the classic algorithms,VTP-based detection algorithm and detection algorithm based on wavelet analysis,it is proven that is a more efficient algorithm concerning detection results.The algorithm can achieve 100% of both detection rate and accuracy rate when parameters are porperly set.Moreover,detection delay is greatly shorten and also it can realize well real-time detection of DDoS attack after NLPP is introduced.
出处
《计算机学报》
EI
CSCD
北大核心
2011年第2期395-405,共11页
Chinese Journal of Computers
基金
国家自然科学基金项目"基于网络流量的DDoS安全防御体系与关键技术研究"(60403028)资助
关键词
分布式拒绝服务
非线性预处理
网络流量预测
实时检测
distributed denial of service
non-linear preprocessing
network traffic prediction
real-time detection
