The Http-flood Detection Methods Based on User Browsing Behavior
Li Meng · Computers & Security · 2010
With the traditional DDoS attacks based on low-level protocol than the application layer DDoS attacks have a more pronounced effect, but also more difficult to detect. Existing solutions include: feature detection, traffic restrictions, hidden semi-Markov model. These methods in the detection of application layer DDoS attacks (eg, http-get flood) attack detection rate is low or the detection of slow. Presented in this paper based on user browsing behavior of the detection method of the http flood attack detection results significantly improved.