Detection of Application-Layer DDoS by Clustering Algorithm
Chuyu She, Wushao Wen, Zaihua Lin, Kesong Zheng · 2016
Affinity Propagation (AP) algorithm is a relatively new clustering algorithm that can handle large datasets to obtain more satisfactory results.This paper introduces a detection mechanism for application-layer DDoS attack by using AP algorithm.In this detection strategy, we first extract some features from normal users' sessions.Then, we cluster these normal users' sessions by AP algorithm to get K clusters.Finally, we use these models to detect application-layer DDoS attacks.