Research on a Novel Detection Model for Large-Scale DDoS Attack
Jun Shuai · Journal of Chinese Computer Systems · 2007
This paper,we propose a new DDoS detection model by introducing the abnormal packet filtering based on HOP COUNT into the Tao Peng's DDoS detection method. The proposed model can differentiate the normal traffics from abnormal traffics by a determinant algorithm. On the basis we implement DDoS attack detection using the CUSUM algorithm to inspect two detection features. Furthermore, we introduce the Bloom Filter algorithm into the database lookup processing, which can improve the detection performance and self-security. The experiment demonstrates this model can detect DDoS attack as early as possible with high detection accuracy.