SDN环境下基于Renyi熵的低速率分布式拒绝攻击的检测
发布时间：2018-10-10 16:50
【摘要】：针对现在对低速率分布式拒绝攻击的研究不足,提出了一种在软件定义网络(SDN)环境下,利用Renyi熵来检测L-DDoS的方法.该方法首先在控制器上收集PACKET_IN数据包,然后基于目的 IP来计算Renyi熵,最后通过设定一定的阈值来检测异常流量.实验结果表明:相比于利用香农熵的检测方法,该方法通过调整一定目的 IP熵的阶数可以检测L-DDoS攻击流量从而降低误警率.
[Abstract]:In view of the lack of research on low rate distributed denial of attack, a method to detect L-DDoS using Renyi entropy in the software defined network (SDN) environment is proposed. Firstly, PACKET_IN packets are collected on the controller, then the Renyi entropy is calculated based on the destination IP, and the abnormal traffic is detected by setting a certain threshold. The experimental results show that compared with the Shannon entropy detection method, this method can detect the L-DDoS attack flow by adjusting the order of the objective IP entropy and thus reduce the false alarm rate.
【作者单位】： 中南民族大学计算机科学学院;
【基金】：国家民委教改基金资助项目(15013)
【分类号】：TP393.08
[Abstract]:In view of the lack of research on low rate distributed denial of attack, a method to detect L-DDoS using Renyi entropy in the software defined network (SDN) environment is proposed. Firstly, PACKET_IN packets are collected on the controller, then the Renyi entropy is calculated based on the destination IP, and the abnormal traffic is detected by setting a certain threshold. The experimental results show that compared with the Shannon entropy detection method, this method can detect the L-DDoS attack flow by adjusting the order of the objective IP entropy and thus reduce the false alarm rate.
【作者单位】： 中南民族大学计算机科学学院;
【基金】：国家民委教改基金资助项目(15013)
【分类号】：TP393.08
【参考文献】
相关期刊论文 前2条
1 张朝昆;崔勇;唐，
本文编号：2262536
本文链接：https://www.wllwen.com/guanlilunwen/ydhl/2262536.html
