By Topic

A Bidirectional-Based DDoS Detection Mechanism

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$33 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

2 Author(s)
Chao Liu ; Nanjing Univ. of Posts & Telecommun., Nanjing, China ; Shunyi Zhang

With the rapid development of network, a variety of abnormal flow including the most popular DDoS attacks appear in the network, these abnormal flow greatly limit the Internet providing normal bandwidth services to the normal users. It is difficult to correctly distinguish the legitimate burst flow and the DDoS attacks by using the unilateral flow to analyze and detect the anomaly flow, so we propose a bidirectional-based DDoS detection mechanism. The detection mechanism put forward a state model which includes eight kinds of nodes by analyzing the input and output flow of the network nodes and the relationship between the input and output flow. Through the further analysis of the state model, we can distinguish the abnormal flow and the legitimate burst flow. The detection mechanism plays a timely role in early warning and prevention. The simulation results show that the bidirectional-based DDoS detection mechanism is effective and feasible.

Published in:

2009 5th International Conference on Wireless Communications, Networking and Mobile Computing

Date of Conference:

24-26 Sept. 2009