Chaos-based detection of LDoS attacks

  • Authors:
  • Zhi-Jun Wu;Jin Lei;Di Yao;Ming-Hua Wang;Sarhan M. Musa

  • Affiliations:
  • Tianjin Key Laboratory for Advanced Signal Processing, Civil Aviation University of China, No. 2898, Jinbei Rd., Dongli District, Tianjin 300300, China1;Tianjin Key Laboratory for Advanced Signal Processing, Civil Aviation University of China, No. 2898, Jinbei Rd., Dongli District, Tianjin 300300, China1;Tianjin Key Laboratory for Advanced Signal Processing, Civil Aviation University of China, No. 2898, Jinbei Rd., Dongli District, Tianjin 300300, China1;China Computer Emergency Response Team (CNCERT), Beijing 100029, China2;Engineering Technology Department, Prairie View A&M University, TX 77446, USA3

  • Venue:
  • Journal of Systems and Software
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

A low-rate denial of service (LDoS) attack behaves as a small signal in periodic pulses with low average rate, which hides in normal TCP traffic stealthily. LDoS attacks reduce link throughput and degrade QoS of a target. An approach of detecting LDoS attacks is proposed based on Duffing oscillator in chaos systems. The approach detects LDoS attacks by adopting the technology of digital signal processing (DSP), which takes an LDoS attack as a small signal and normal TCP traffic as background noise. Duffing oscillator is used to detect LDoS attacks in normal TCP traffic. Simulations show that the LDoS attacks can be detected through diagram of the chaotic state, and the period and pulse width of LDoS attacks can be estimated.