DDoS attack detection and classification via Convolutional Neural Network (CNN)

Ahmed Ramzy Shaaban, Essam Abd-Elwanis, Mohamed Hussein
{"title":"DDoS attack detection and classification via Convolutional Neural Network (CNN)","authors":"Ahmed Ramzy Shaaban, Essam Abd-Elwanis, Mohamed Hussein","doi":"10.1109/ICICIS46948.2019.9014826","DOIUrl":null,"url":null,"abstract":"Distributed Denial of Service (DDoS) attacks became the most widely spread attack because it is easily designed and executed but it is very difficult to detect and mitigate. Several artificial neural network (ANN) techniques were considered to detect and classify DDoS attacks. Mission control center (MCC) is responsible for controlling the spacecraft, so MCC network should maintain the availability i.e. should be protected from any kind of malicious traffic affect its availability such as DDoS attack. In this paper, convolutional neural network (CNN) technique is presented to detect and classify the DDoS traffic into normal and malicious information with an accuracy of 99 % using two different datasets. One is captured from simulated MCC network by Wireshark and the other one was a predefined open source dataset. The results are compared with other classification algorithms like decision tree (D-Tree), support vector machine (SVM), K-nearest neighbors (K-NN), and neural network (NN).","PeriodicalId":200604,"journal":{"name":"2019 Ninth International Conference on Intelligent Computing and Information Systems (ICICIS)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"18","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2019 Ninth International Conference on Intelligent Computing and Information Systems (ICICIS)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICICIS46948.2019.9014826","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 18

Abstract

Distributed Denial of Service (DDoS) attacks became the most widely spread attack because it is easily designed and executed but it is very difficult to detect and mitigate. Several artificial neural network (ANN) techniques were considered to detect and classify DDoS attacks. Mission control center (MCC) is responsible for controlling the spacecraft, so MCC network should maintain the availability i.e. should be protected from any kind of malicious traffic affect its availability such as DDoS attack. In this paper, convolutional neural network (CNN) technique is presented to detect and classify the DDoS traffic into normal and malicious information with an accuracy of 99 % using two different datasets. One is captured from simulated MCC network by Wireshark and the other one was a predefined open source dataset. The results are compared with other classification algorithms like decision tree (D-Tree), support vector machine (SVM), K-nearest neighbors (K-NN), and neural network (NN).
基于卷积神经网络(CNN)的DDoS攻击检测与分类
分布式拒绝服务攻击(Distributed Denial of Service, DDoS)由于其易于设计和实施,但难以检测和缓解,成为最广泛传播的攻击。采用人工神经网络(ANN)技术对DDoS攻击进行检测和分类。任务控制中心(MCC)负责控制航天器,因此MCC网络应保持可用性,即应防止任何类型的恶意流量影响其可用性,如DDoS攻击。本文采用卷积神经网络(CNN)技术,利用两种不同的数据集对DDoS流量进行正常和恶意信息的检测和分类,准确率达到99%。一个是Wireshark从模拟MCC网络中捕获的,另一个是预定义的开源数据集。将结果与决策树(D-Tree)、支持向量机(SVM)、k近邻(K-NN)和神经网络(NN)等其他分类算法进行比较。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信