基于快速分数阶傅氏变换的DDoS攻击检测  

DDoS attack detection based on fast fractional Fourier transform

作　　者：陈世文[1] 郭通[1] 黄万伟[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450002

出　　处：《计算机工程与应用》2013年第24期4-7,共4页Computer Engineering and Applications

基　　金：国家重点基础研究发展规划(973)(No.G2012CB315900)

摘　　要：针对传统检测方法存在精度低、训练复杂度高、适应性差的问题,提出了基于快速分数阶Fourier变换估计Hurst指数的DDoS攻击检测方法。利用DDoS攻击对网络流量自相似性的影响,通过监测Hurst指数变化阈值判断是否存在DDoS攻击。在DARPA2000数据集和不同强度TFN2K攻击流量数据集上进行了DDoS攻击检测实验,实验结果表明,基于FFrFT的DDoS攻击检测方法有效,相比于常用的小波方法,该方法计算复杂度低,实现简单,Hurst指数估计精度更高,能够检测强度较弱的DDoS攻击,可有效降低漏报、误报率。Aiming at the low detecting accuracy, high training complexity and poor adaptability in DDoS attacks detection methods, a new DDoS attack model based on fast fractional Fourier transform is proposed. It utilizes the principle that DDoS attacks would impact the self-similarity of the traffic, then detects DDoS attacks by monitoring the change range of the Hurst parameter. In DARPA2000 dataset and TFN2K attacks traffic under different intensity, this paper compares the new algorithm with wavelet method and etc. The experimental results reveal that the method has lower compute complexity and better detecting accuracy.

关 键 词：分布式拒绝服务 快速分数阶Fourier变换 自相似性 HURST指数 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]