TVis: A Light-weight Traffic Visualization System for DDoS Detection

TVis : A Light-weight Traffic Visualization System for DDoS Detection

Bhuyan, Monowar H. (author): Umeå universitet,Institutionen för datavetenskap,Laboratory for Cyber Resilience, NAIST, Nara, Japan,Autonomous Distributed Systems Lab

Kadobayashi, Youki (author): Nara Institute of Science and Technology, Japan,Laboratory for Cyber Resilience

Elmroth, Erik (author): Umeå universitet,Institutionen för datavetenskap,Autonomous Distributed Systems Lab

(creator_code:org_t)

Related links:: https://isai-nlp2019...; show more...; https://urn.kb.se/re...; https://doi.org/10.1...; show less...

Abstract Subject headings

With rapid growth of network size and complexity, network defenders are facing more challenges in protecting networked computers and other devices from acute attacks. Traffic visualization is an essential element in an anomaly detection system for visual observations and detection of distributed DoS attacks. This paper presents an interactive visualization system called TVis, proposed to detect both low-rate and highrate DDoS attacks using Heron’s triangle-area mapping. TVis allows network defenders to identify and investigate anomalies in internal and external network traffic at both online and offline modes. We model the network traffic as an undirected graph and compute triangle-area map based on incidences at each vertex for each 5 seconds time window. The system triggers an alarm iff the system finds an area of the mapped triangle beyond the dynamic threshold. TVis performs well for both low-rate and high-rate DDoS detection in comparison to its competitors.

By the author/editor: Kalwar, Abhishek; Bhuyan, Monowar ...; Bhattacharyya, D ...; Kalita, Jugal K.; Kadobayashi, You ...; Elmroth, Erik

About the subject

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.