基于小波和分形原理的DDoS攻击检测方法  

A DDoS Attack Detecting Method Based on Wavelet and Fractal Theory

作　　者：罗淇方[1] 钟诚[2] 

机构地区：[1]广西民族大学数学与计算机科学学院,广西南宁530006 [2]广西大学计算机与电子信息学院,广西南宁500004

出　　处：《微电子学与计算机》2007年第10期85-87,91,共4页Microelectronics & Computer

摘　　要：提出一种基于离散小波变换和分形原理的DDoS攻击检测方法。该方法通过离散小波变换的多分辩率分析突现DDoS攻击特征,对小波变换系数进行盒分形维计算,将经实验确定的关键盒维数作为多维空间的向量序列,最后使用经过样本训练的K-nn(K最近邻)分类器进行攻击识别。实验结果表明分形与小波相结合取得了较好的检测效果,与离散小波检测方法相比,该方法提高了检测精确度。Based on the discrete wavelet transformation and fractal theory, this paper presents a DDoS detecting algorithm. This method has the character of DDoS attack appear clear by multiresolution analysis of wavelet transformation, and undertake box dimensions calculation for the transformation coefficient of discrete wavelet, the key box dimensions are confirmed by the experiment and are regarded as vector sequence of muhidimensions space. Then the DDoS are recognized by applying the K-nearest neighbor classifier trained by the samples. The results of experiment show that the presented algorithm of combination of wavelet transformation and fractal theory can detect the DDoS attacks effectively. Comparing with the detecting method of discrete wavelet transformation, this method has improved the accuracy of detecting.

关 键 词：高散小波交换 分形理论 DDOS攻击检测 

分 类 号：TP393.8[自动化与计算机技术—计算机应用技术]