A Case Study of Detecting HULK-based DDoS Traffic with Random Forest Classifier

Modern network administration desires to have early detection of DDoS traffic before damages occur. Nevertheless, as Internet traffic grows over years, it becomes more challenging to detect DDoS traffic in an efficient and effective manner. The survey of existing literature shows that random forest classifier, when applied to DDoS detection, yields great performance at low learning costs. This work is devoted to a case study of implementing and using random forest classifier to detect DDoS traffic generated by a well-known DDoS tool named HULK. Our result indicates that when used with a good feature selection mechanism, random forest classifier can achieve a high detection accuracy with fast training time.