Triangle-Area-Based Multivariate Correlation Analysis for Effective Denial-of-Service Attack Detection

Tan, Zhiyuan; Jamdagni, Aruna; He, Xiangjian; Nanda, Priyadarsi; Liu, Ren Ping

Abstract

Cloud computing plays an important role in current converged networks. It brings convenience of accessing services and information to users regardless of location and time. However, there are some critical security issues residing in cloud computing, such as availability of services. Denial of service occurring on cloud computing has even more serious impact on the Internet. Therefore, this paper studies the techniques for detecting Denial-of-Service (DoS) attacks to network services and proposes an effective system for DoS attack detection. The proposed system applies the idea of Multivariate Correlation Analysis (MCA) to network traffic characterization and employs the principal of anomaly-based detection in attack recognition. This makes our solution capable of detecting known and unknown DoS attacks effectively by learning the patterns of legitimate network traffic only. Furthermore, a triangle area technique is proposed to enhance and speed up the process of MCA. The effectiveness of our proposed detection system is evaluated on the KDD Cup 99 dataset, and the influence of both non-normalized and normalized data on the performance of the detection system is examined. The results presented in the system evaluation section illustrate that our DoS attack detection system outperforms two state-of-the-art approaches.

Citation

Tan, Z., Jamdagni, A., He, X., Nanda, P., & Liu, R. P. (2012). Triangle-Area-Based Multivariate Correlation Analysis for Effective Denial-of-Service Attack Detection. . https://doi.org/10.1109/trustcom.2012.284

• Conference Name: 2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications
• Start Date: Jun 25, 2012
• End Date: Jun 27, 2012
• Online Publication Date: Sep 6, 2012
• Publication Date: 2012-06
• Deposit Date: Dec 6, 2016
• Pages: 33-40
• ISBN: 9781467321723; 9780769547459
• DOI: https://doi.org/10.1109/trustcom.2012.284
• Keywords: triangle area, Denial-of-Service attack, network traffic characterization, multivariate correlations
• Public URL: http://researchrepository.napier.ac.uk/Output/448919