Detecting DoS and DDoS Attacks using Chi-Square
In this paper, we propose an agent_based distributed intrusion detection architecture, which detects DoS/DDoS attacks by comparing source IP addressesnormal and current connection frequencies. First, we collect source IPspacket statistics to obtain their normal packet distribution. When current statistics suddenly increase, very often it is an attack. Experimental results show that this approach can effectively detect DoS/DDoS attacks.
Fang-Yie Leu Chia-Chi Pai
Department of Computer Science,Tunghai University,Taiwan
国际会议
The Fifth International Conference on Information Assurance and Security(第五届信息保障与安全国际会议)
西安
英文
255-258
2009-08-18(万方平台首次上网日期,不代表论文的发表时间)