Xingbing Fu , Supeng Lou , Jiaming Zheng , Cheng Chi , Jie Yang , Dong Wang , Chenming Zhu , Butian Huang , Xiatian Zhu
{"title":"Deep learning techniques for DDoS attack detection: Concepts, analyses, challenges, and future directions","authors":"Xingbing Fu , Supeng Lou , Jiaming Zheng , Cheng Chi , Jie Yang , Dong Wang , Chenming Zhu , Butian Huang , Xiatian Zhu","doi":"10.1016/j.eswa.2025.128469","DOIUrl":null,"url":null,"abstract":"<div><div>DDoS (Distributed Denial of Service) attacks are increasingly becoming a major threat in the field of cybersecurity. They overwhelm target servers by sending large-scale requests from multiple locations, causing the servers to become unresponsive. The distributed nature of DDoS attacks also makes detection and defense even more challenging. As the damage caused by such attacks grows, the development of efficient detection and mitigation mechanisms has become an urgent priority. While traditional machine learning methods are useful, they still require manual feature extraction, which not only involves significant human intervention, but also is time-consuming. In contrast, deep learning offers an automated approach to feature extraction and can learn more abstract patterns, which leads to improved detection performance. Therefore, this paper reviews and analyzes existing deep learning methods for DDoS attack detection. We provide a comprehensive analysis of the various types of DDoS attacks and explore different deep learning models employed for attack detection. Additionally, we explore techniques such as federated learning that can be integrated with deep learning, and analyze their related literature in DDoS attack detection. Finally, we specify future research directions on DDoS attack detection using deep learning.</div></div>","PeriodicalId":50461,"journal":{"name":"Expert Systems with Applications","volume":"291 ","pages":"Article 128469"},"PeriodicalIF":7.5000,"publicationDate":"2025-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Expert Systems with Applications","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0957417425020883","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, ARTIFICIAL INTELLIGENCE","Score":null,"Total":0}
引用次数: 0
Abstract
DDoS (Distributed Denial of Service) attacks are increasingly becoming a major threat in the field of cybersecurity. They overwhelm target servers by sending large-scale requests from multiple locations, causing the servers to become unresponsive. The distributed nature of DDoS attacks also makes detection and defense even more challenging. As the damage caused by such attacks grows, the development of efficient detection and mitigation mechanisms has become an urgent priority. While traditional machine learning methods are useful, they still require manual feature extraction, which not only involves significant human intervention, but also is time-consuming. In contrast, deep learning offers an automated approach to feature extraction and can learn more abstract patterns, which leads to improved detection performance. Therefore, this paper reviews and analyzes existing deep learning methods for DDoS attack detection. We provide a comprehensive analysis of the various types of DDoS attacks and explore different deep learning models employed for attack detection. Additionally, we explore techniques such as federated learning that can be integrated with deep learning, and analyze their related literature in DDoS attack detection. Finally, we specify future research directions on DDoS attack detection using deep learning.
期刊介绍:
Expert Systems With Applications is an international journal dedicated to the exchange of information on expert and intelligent systems used globally in industry, government, and universities. The journal emphasizes original papers covering the design, development, testing, implementation, and management of these systems, offering practical guidelines. It spans various sectors such as finance, engineering, marketing, law, project management, information management, medicine, and more. The journal also welcomes papers on multi-agent systems, knowledge management, neural networks, knowledge discovery, data mining, and other related areas, excluding applications to military/defense systems.