arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2002.04902cs.CRcs.NI
收藏

LUCID:一个实用的轻量级深度学习解决方案,用于DDoS攻击检测

LUCID: A Practical, Lightweight Deep Learning Solution for DDoS Attack Detection

Roberto Doriguzzi-Corin, Stuart Millar, Sandra Scott-Hayward, Jesus Martinez-del-Rincon, Domenico Siracusa

摘要:

分布式拒绝服务(DDoS)攻击是当今互联网中最有害的威胁之一,破坏了基本服务的可用性。DDoS检测的挑战是攻击方法与要分析的实时流量的组合。在本文中,我们提出了一个实用的,轻量级的深度学习DDoS检测系统称为LUCID,它利用卷积神经网络(CNN)的属性将流量分类为恶意或良性。我们做了四个主要的贡献;(1)一个创新的应用程序的CNN检测DDoS流量与低处理开销,(2)一个不可知的预处理机制,以产生流量观察在线攻击检测,(3)激活分析,解释LUCID的DDoS分类,和(4)一个经验验证的解决方案在资源受限的硬件平台。使用最新的数据集,LUCID匹配现有的国家的最先进的检测精度,同时提出了一个40倍的减少处理时间相比,国家的最先进的。与我们的评估结果,我们证明了所提出的方法是适合于有效的DDoS检测在资源受限的操作环境。

英文摘要:

Distributed Denial of Service (DDoS) attacks are one of the most harmful threats in today's Internet, disrupting the availability of essential services. The challenge of DDoS detection is the combination of attack approaches coupled with the volume of live traffic to be analysed. In this paper, we present a practical, lightweight deep learning DDoS detection system called LUCID, which exploits the properties of Convolutional Neural Networks (CNNs) to classify traffic flows as either malicious or benign. We make four main contributions; (1) an innovative application of a CNN to detect DDoS traffic with low processing overhead, (2) a dataset-agnostic preprocessing mechanism to produce traffic observations for online attack detection, (3) an activation analysis to explain LUCID's DDoS classification, and (4) an empirical validation of the solution on a resource-constrained hardware platform. Using the latest datasets, LUCID matches existing state-of-the-art detection accuracy whilst presenting a 40x reduction in processing time, as compared to the state-of-the-art. With our evaluation results, we prove that the proposed approach is suitable for effective DDoS detection in resource-constrained operational environments.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑