A Proposal to Distinguish DDoS Traffic in Flash Crowd Environments

Anderson Aparecido Alves da Silva, Leonardo Santos Silva, Erica Leandro Bezerra, Adilson Eduardo Guelfi, Claudia de Armas, Marcelo Teixeira de Azevedo and Sergio Takeo Kofuji
Additional contact information
Anderson Aparecido Alves da Silva: SENAC, Brazil & IPT, Brazil & UNIP, Brazil & USP, Brazil
Leonardo Santos Silva: IPT, Brazil
Erica Leandro Bezerra: USP, Brazil
Adilson Eduardo Guelfi: UNOESTE, Brazil
Claudia de Armas: USP, Brazil
Marcelo Teixeira de Azevedo: USP, Brazil
Sergio Takeo Kofuji: USP, Brazil

International Journal of Information Security and Privacy (IJISP), 2022, vol. 16, issue 1, 1-16

Abstract: A Flash Crowd (FC) event occurs when network traffic increases suddenly due to a specific reason (e.g. e-commerce sale). Despite its legitimacy, this kind of situation usually decreases the network resource performance. Furthermore, attackers may simulate FC situations to introduce undetected attacks, such as Distributed Denial of Service (DDoS), since it is very difficult to distinguish between legitimate and malicious data flows. To differentiate malicious and legitimate traffic we propose applying zero inflated count data models in conjunction with the Correlation Coefficient Flow (CCF) method – a well-known method used in FC situations. Our results were satisfactory and improve the accuracy of CCF method. Furthermore, since the environment toggles between normal and FC situations, our method has the advantage of working in both situations.

Date: 2022
References: Add references at CitEc
Citations:

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve. ... 018/IJISP.2022010104 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jisp00:v:16:y:2022:i:1:p:1-16

Access Statistics for this article

International Journal of Information Security and Privacy (IJISP) is currently edited by Yassine Maleh

More articles in International Journal of Information Security and Privacy (IJISP) from IGI Global
Bibliographic data for series maintained by Journal Editor ().