自适应聚类算法在DDoS攻击检测中的应用  

Application of adaptive clustering algorithm on DDoS attacks detection

作　　者：李丽娟[1,2] 李少东[1] 

机构地区：[1]湖南大学计算机与通信学院,长沙410082 [2]湖南大学网络与信息安全湖南省重点实验室,长沙410082

出　　处：《计算机工程与应用》2012年第2期86-89,共4页Computer Engineering and Applications

摘　　要：针对DDoS攻击检测中k-means算法对初始聚类中心敏感和要求输入聚类数目的缺点,提出了一种基于动态指数和初始聚类中心点选取的自适应聚类算法(Adaptive Clustering Algorithm),并使用该算法建立DDoS攻击检测模型。通过使用LLS_DDoS_1.0数据集对该模型进行测试并与k-means算法对比,实验结果表明,该算法提高了DDoS攻击的检测率,降低了误警率,验证了检测方法的有效性。The k-means algorithm in DDoS attack detection is sensitive to the initial cluster centers and need to input the number of clusters. For the above two drawbacks, a new adaptive clustering algorithm based on dynamic index and the initial center selection is proposed, and use it to establish the DDoS attack detection model. Then the detection model is tested by using the LLS_DDoS_1.0 data sets, and is compared with the k-means algorithm. The result show that the method improves the detection rate and reduces the false alarm rate. So it is an effective detection method.

关 键 词：DDOS攻击检测 K-MEANS算法 动态指数 自适应聚类算法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]