A novel deviation-based detection mechanism for DDoS attacks in the cloud environment
A. Somasundaram, S. Devaraju · International Journal of Information and Computer Security · 2025
Distributed denial-of-service attacks are prevalent vulnerabilities in cloud computing, causing disruption to legitimate users.Despite existing detection methods, reliability and accuracy need improvement.A systematic approach is urgently needed for both spoofing and non-spoofing attacks.To distinguish attacks from legitimate network traffic, this paper proposes a deviation-based detection mechanism based on software-defined networks.The model has two significant phases such as knowledge acquisition and deviation-based detection.The model makes use of the variance of a discrete probability distribution on the network features that are used to collect the knowledge base.For the known flow, the deviation between the traffic and the knowledge base is evaluated to determine the attack traffic.The rule-based detection mechanism is proposed for detecting attacks in the unknown flow.The proposed model, analysed through experimental analysis, demonstrated an average detection rate of 98% and an execution time of 0.72 seconds, outperforming its competitors.