Application-layer DDoS Attack Detection Based on Request Keywords
Bailin Xie, Shengyi Jiang, Zhang Qian-sheng · 2013
Today,the application-layer DDoS attacks may cause great harm to the security of the Internet.Existing detection methods lack the versatility,i.e.,an approach only focuses on one particular application-layer DDoS attack.In order to quickly and effectively identify several different application-layer DDoS attacks,this paper presented a detection method based on request keywords .In this method,the input is the number and frequency distribution distance of request Key words per unit time.Then,the hidden markov model is used to detect application-layer DDoS attacks.The experimental results show that the proposed method is valid to discover several different application-layer DDoS attacks with relatively high detection ratio and low false positive ratio.