A Real-time Detection Method of LDoS Based on Shewhart Control Chart Detection Theory
Kai Chen, Huiyu Liu, Xiaosu Chen · 2012
The low-rate denial of service (LDoS) attack is a new threat to Internet security.Due to its low rate and high concealment characteristics, LDoS attack is difficult to be detected through the analysis of attack flow directly.Most present methods primarily analysis network traffic or feature of LDoS flows to determine LDoS, but they cannot get the satisfactory outcome.From the phenomenon that TCP flow exhibits special different characteristics under LDoS attack and with the superiority of Shewhart Control Chart in outlier detection, this paper proposes a real-time LDoS attack detection method based on Shewhart Control Chart theory, and devises detection criterions based on abundant experiments.This detection method can detect LDoS attack accurately and effectively.