A Review on Hot-IP Finding Methods and Its Application in Early DDoS Target Detection

Xuan Dau Hoang and Hong Ky Pham
Additional contact information
Xuan Dau Hoang: CyberSecurity Lab, Posts and Telecommunications Institute of Technology, Hanoi 100000, Vietnam
Hong Ky Pham: VNPT Software, Hanoi 100000, Vietnam

Future Internet, 2016, vol. 8, issue 4, 1-10

Abstract: On the high-speed connections of the Internet or computer networks, the IP (Internet Protocol) packet traffic passing through the network is extremely high, and that makes it difficult for network monitoring and attack detection applications. This paper reviews methods to find the high-occurrence-frequency elements in the data stream and applies the most efficient methods to find Hot-IPs that are high-frequency IP addresses of IP packets passing through the network. Fast finding of Hot-IPs in the IP packet stream can be effectively used in early detection of DDoS (Distributed Denial of Service) attack targets and spreading sources of network worms. Research results show that the Count-Min method gives the best overall performance for Hot-IP detection thanks to its low computational complexity, low space requirement and fast processing speed. We also propose an early detection model of DDoS attack targets based on Hot-IP finding, which can be deployed on the target network routers.

Keywords: DDoS attack detection; Count-Min; Count-Sketch; Group Testing (search for similar items in EconPapers)
JEL-codes: O3 (search for similar items in EconPapers)
Date: 2016
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/1999-5903/8/4/52/pdf (application/pdf)
https://www.mdpi.com/1999-5903/8/4/52/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jftint:v:8:y:2016:i:4:p:52-:d:81364

Access Statistics for this article

Future Internet is currently edited by Ms. Grace You

More articles in Future Internet from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().