Rank Correlation for Low-Rate DDoS Attack Detection: An Empirical Evaluation
Arindom Ain, Monowar H. Bhuyan, Dhruba K. Bhattacharyya, Jugal Kumar Kalita · International journal of network security · 2016
A low-rate distributed denial of service (DDoS) attack has the ability to obscure its trac because it is very similar to legitimate trac. It can easily evade current detection mechanisms. Rank correlation measures can quantify signicant dierences between attack trac and legitimate trac based on their rank values. In this paper, we use two rank correlation measures, namely, Spearmen Rank Correlation (SRC) and Partial Rank Correlation (PRC) to detect low-rate DDoS attacks. These measures are empirically evaluated using three real-life datasets. Experimental results show that both measures can eectively discriminate legitimate trac from attack trac. We nd