Application Layer DDoS Attack Detection Using Cuckoo Search Algorithm-Trained Radial Basis Function

Beitollahi, Hakem (author): School of Computer Engineering, Iran University of Science and Technology, Tehran, Iran

Sharif, Dyari Mohammad (author): Computer Science Department, Soran University, Kurdistan Region, Soran, Iraq

Fazeli, Mahdi, 1979- (author): Högskolan i Halmstad,Akademin för informationsteknologi,Computing and Electronics for Real-Time and Embedded Systems (CERES)

(creator_code:org_t)

Piscataway, NJ : IEEE, 2022
2022
English.
In: IEEE Access. - Piscataway, NJ : IEEE. - 2169-3536. ; 10, s. 63844-63854

Related links:: https://doi.org/10.1...; show more...; https://hh.diva-port... (primary) (Raw object); https://urn.kb.se/re...; https://doi.org/10.1...; show less...

Abstract Subject headings

In an application-layer distributed denial of service (App-DDoS) attack, zombie computers bring down the victim server with valid requests. Intrusion detection systems (IDS) cannot identify these requests since they have legal forms of standard TCP connections. Researchers have suggested several techniques for detecting App-DDoS traffic. There is, however, no clear distinction between legitimate and attack traffic. In this paper, we go a step further and propose a Machine Learning (ML) solution by combining the Radial Basis Function (RBF) neural network with the cuckoo search algorithm to detect App-DDoS traffic. We begin by collecting training data and cleaning them, then applying data normalizing and finding an optimal subset of features using the Genetic Algorithm (GA). Next, an RBF neural network is trained by the optimal subset of features and the optimizer algorithm of cuckoo search. Finally, we compare our proposed technique to the well-known k-nearest neighbor (k-NN), Bootstrap Aggregation (Bagging), Support Vector Machine (SVM), Multi-layer Perceptron) MLP, and (Recurrent Neural Network) RNN methods. Our technique outperforms previous standard and well-known ML techniques as it has the lowest error rate according to error metrics. Moreover, according to standard performance metrics, the results of the experiments demonstrate that our proposed technique detects App-DDoS traffic more accurately than previous techniques. © 2013 IEEE.

By the author/editor: Beitollahi, Hake ...; Sharif, Dyari Mo ...; Fazeli, Mahdi, 1 ...

About the subject

ENGINEERING AND TECHNOLOGY: ENGINEERING AND ...; and Electrical Engin ...; and Computer Systems

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.