An adaptive KPCA approach for detecting LDoS attack

作者:Zhang, Xiaoyu*; Wu, Zhijun; Chen, Jiusheng; Yue, Meng
来源:International Journal of Communication Systems, 2017, 30(4): e2993.
DOI:10.1002/dac.2993

摘要

Low-rate denial-of-service (LDoS) attack sends out attack packets at low-average rate of traffic flow in short time. It is stealthier than traditional DoS attack, which makes detection of LDoS extremely difficult. In this paper, an adaptive kernel principal component analysis method is proposed for LDoS attack detection. The network traffic flow is extracted through wavelet multi-scale analysis. An adaptive kernel principal component analysis method is adopted to detect LDoS attack through the squared prediction error statistics. Key parameters such as the parameter of the radial basis function, the number of principal components, and the squared prediction error confidence limit are adaptively trained with training data and updated with the network environment. Simulation is accomplished in NS-2 environment, and results prove the favorable LDoS attack detection efficiency by the proposed approach.