应用非迭代Apriori算法检测分布式拒绝服务攻击  

DDoS detection with non-iterative Apriori algorithm

作　　者：高琰[1,2] 王台华[1] 郭帆[1] 余敏[1] 

机构地区：[1]江西师范大学计算机信息工程学院,南昌330022 [2]江西省气象信息中心,南昌330046

出　　处：《计算机应用》2011年第6期1521-1524,共4页journal of Computer Applications

基　　金：国家973计划项目(2007CB316505)

摘　　要：提出了一种非迭代Apriori算法,无需多次扫描事务数据库,使用一步交集操作处理同一时间段的网络数据包,通过挖掘各数据包之间的强关联规则,可较快检测分布式拒绝服务(DDoS)攻击。与现有算法相比,检测DDoS攻击的时间和空间性能较优。在DARPA数据集上的实验结果表明应用该算法能有效检测DDoS攻击。An improved non-iterative Apriori algorithm was proposed to detect Distributed Denail of Service（DDoS） attacks.An one-step intersection operation was used to process network packets within the specific time range,and the strong correlation rules of the packets were studied so as to achieve the quick detection of DDoS atttacks.In comparison with current algorithms,it shows better performance in efficiency and storage space in detection of DDoS attacks.Experimental results on DARPA data-sets show the algorithm is able to detect DDoS effectively.

关 键 词：数据挖掘 APRIORI算法 分布式拒绝服务攻击 入侵检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]