Droidsentinel: ¿Está Mi Dispositivo Móvil Participando En Un Ataque Ddos?
Andrés Herranz González, B. Lorenzo Fernández, Diego Maestre Vidal, Guillermo Rius García, Marco Antonio Sotelo Monge, Jorge Maestre Vidal, Luis Javier García Villalba · Zenodo (CERN European Organization for Nuclear Research) · 2018
This article introduces the DroidSentinel strategy for the detection of mobile device participation in Denial of Service attacks based on the analysis of outgoing traffic flows. Unlike much of the on bibliografı́a, the proposed solution assumes the non-seasonality of the monitoring environment, considering only the information reported by each source end. The data collected by the devices are transferred to a remote analysis server, which provides capabilities Advanced Metric Aggregation, Classification, Prediction and construction of decision thresholds. This reduces the impact inherent in the execution of complete analı́ticas tasks caused in the protected system. Preliminary results observed by considering different metrics and modes of use of the device have been promising, demonstrating the effectiveness of the proposal in the different evaluation scenarios implemented.