BEHAVIOR-BASED CLUSTERING FOR DISCRIMINATION BETWEEN FLASH CROWDS AND DDoS ATTACKS

Young Jun Heo, Jintae Oh, Jongsoo Jang

2009

Abstract

We propose discrimination methods that classify cluster of traffic behaviour of flash crowds and DDoS attacks such as traffic pattern and characteristics and check cluster randomness. The behavior-based clustering consolidates packet into clusters based on similarity of observed behavior, e.g., source IPs are clustered together based on their pattern of destination port usage. The main objectives are to find way to proactively resolve problems such as DDoS attacks by detection and resolving attacks in their early development stages.

Paper Citation

in Harvard Style

Jun Heo Y., Oh J. and Jang J. (2009). BEHAVIOR-BASED CLUSTERING FOR DISCRIMINATION BETWEEN FLASH CROWDS AND DDoS ATTACKS . In Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2009) ISBN 978-989-674-005-4, pages 140-143. DOI: 10.5220/0002225801400143

in Bibtex Style

@conference{secrypt09,
author={Young Jun Heo and Jintae Oh and Jongsoo Jang},
title={BEHAVIOR-BASED CLUSTERING FOR DISCRIMINATION BETWEEN FLASH CROWDS AND DDoS ATTACKS},
booktitle={Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2009)},
year={2009},
pages={140-143},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0002225801400143},
isbn={978-989-674-005-4},
}

in EndNote Style

TY - CONF
JO - Proceedings of the International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2009)
TI - BEHAVIOR-BASED CLUSTERING FOR DISCRIMINATION BETWEEN FLASH CROWDS AND DDoS ATTACKS
SN - 978-989-674-005-4
AU - Jun Heo Y.
AU - Oh J.
AU - Jang J.
PY - 2009
SP - 140
EP - 143
DO - 10.5220/0002225801400143