Ahmed Ramzy Shaaban, Essam Abd-Elwanis, Mohamed Hussein
{"title":"DDoS attack detection and classification via Convolutional Neural Network (CNN)","authors":"Ahmed Ramzy Shaaban, Essam Abd-Elwanis, Mohamed Hussein","doi":"10.1109/ICICIS46948.2019.9014826","DOIUrl":null,"url":null,"abstract":"Distributed Denial of Service (DDoS) attacks became the most widely spread attack because it is easily designed and executed but it is very difficult to detect and mitigate. Several artificial neural network (ANN) techniques were considered to detect and classify DDoS attacks. Mission control center (MCC) is responsible for controlling the spacecraft, so MCC network should maintain the availability i.e. should be protected from any kind of malicious traffic affect its availability such as DDoS attack. In this paper, convolutional neural network (CNN) technique is presented to detect and classify the DDoS traffic into normal and malicious information with an accuracy of 99 % using two different datasets. One is captured from simulated MCC network by Wireshark and the other one was a predefined open source dataset. The results are compared with other classification algorithms like decision tree (D-Tree), support vector machine (SVM), K-nearest neighbors (K-NN), and neural network (NN).","PeriodicalId":200604,"journal":{"name":"2019 Ninth International Conference on Intelligent Computing and Information Systems (ICICIS)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"18","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2019 Ninth International Conference on Intelligent Computing and Information Systems (ICICIS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICICIS46948.2019.9014826","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 18
Abstract
Distributed Denial of Service (DDoS) attacks became the most widely spread attack because it is easily designed and executed but it is very difficult to detect and mitigate. Several artificial neural network (ANN) techniques were considered to detect and classify DDoS attacks. Mission control center (MCC) is responsible for controlling the spacecraft, so MCC network should maintain the availability i.e. should be protected from any kind of malicious traffic affect its availability such as DDoS attack. In this paper, convolutional neural network (CNN) technique is presented to detect and classify the DDoS traffic into normal and malicious information with an accuracy of 99 % using two different datasets. One is captured from simulated MCC network by Wireshark and the other one was a predefined open source dataset. The results are compared with other classification algorithms like decision tree (D-Tree), support vector machine (SVM), K-nearest neighbors (K-NN), and neural network (NN).
分布式拒绝服务攻击(Distributed Denial of Service, DDoS)由于其易于设计和实施,但难以检测和缓解,成为最广泛传播的攻击。采用人工神经网络(ANN)技术对DDoS攻击进行检测和分类。任务控制中心(MCC)负责控制航天器,因此MCC网络应保持可用性,即应防止任何类型的恶意流量影响其可用性,如DDoS攻击。本文采用卷积神经网络(CNN)技术,利用两种不同的数据集对DDoS流量进行正常和恶意信息的检测和分类,准确率达到99%。一个是Wireshark从模拟MCC网络中捕获的,另一个是预定义的开源数据集。将结果与决策树(D-Tree)、支持向量机(SVM)、k近邻(K-NN)和神经网络(NN)等其他分类算法进行比较。