Detection of denial of service and network probing attacks based on principal component analysis
Chao Shao · Journal of Computer Applications · 2012
To solve the problem of detecting Denial of Service(DoS) and network probing attacks,a new method based on Principal Component Analysis(PCA) was proposed in this paper.PCA was done on both attack and normal traffic to collect various statistics,and then the detection model was constructed based on these statistics.At last,this paper utilized the threshold of the statistics to achieve a fixed rate of false alarms.The experimental results show that this approach can detect DoS and network probing attacks effectively,and yield 99 percent detection rate;in addition,security masters can make responses in time and the responses can reduce the loss under real-time attacks.