System of DDoS Attack Collaborative Detection Based on Information Entropy Design and Implementation
Song Hong-ta · Journal of Chinese Computer Systems · 2015
Distributed denial of service( DDo S) is one of the denial of service attacks which are popular and leading to great economic loss and damage. The ways of attack are more diversified and intellectual. Therefore,DDo S attack detection technology has increasingly become a focus of the study,and how accurate and timely detection techniques to identify attacks become pressing problems. In recent years,manys people and organizations are engaged in research of all kins of key technologies of DDo S detection and hava got outstanding achievements. But the DDo S detection still need to be improved. With the aim of real-time detection of DDo S,the article makes a detailed analysis of characteristics of DDo S,research about detection technologies of DDo S and adapts collaborative detection based on information entropy. Do statistic analysis of destination ip address and source ip address in the partial inspection,by then method of subspace and Kmeans to estimate information entropy and then integrate the detection information and information entropy,to detection in the global decision way to further prove the superiority of the algorithm.