The Detection of Distributed Denial-of-Service Attacks Using the Improved k-Means Algorithm
Zhiping Cai · Computer Engineering and Science · 2008
Distributed Denial-of-Service(DDoS)attacks are a critical threat to the Internet.This paper analyses the essential characteristics of DDoS attacks,and presents a novel detection scheme by combining the traffic volume with traffic feature distribution entropy.Furthermore,we improve the k-means clustering algorithm,which is used to establish the attack detection model.Finally we test our detection model on the LLDOS1.0 dataset.The experimental results indicate that the model leads to an improved accuracy of attack detection.