TARU PUBLICATIONS
Journal of Discrete Mathematical Sciences and Cryptography cover

Journal of Discrete Mathematical Sciences and Cryptography

(Since 1998)
Open Access ·Peer-reviewed·ISSN (Online): 2169-0065·ISSN (Print): 0972-0529

CiteScore 2025: 2.7 (Q1)

Powered by:Powered by

Monthly Journal: Publishes theoretical and applied research in all areas of Discrete Mathematical Sciences, Cryptography, Combinatorics, Elliptic Curves and Information Security.

Issues up to 2022 co-published with and available at:Taylor & Francis Online
submissions@tarupublications.com
Taru Online First Current IssueSpecial IssuesBrowse all Issues
Journal of Discrete Mathematical Sciences and Cryptography
Open Access Research Article

A hybrid methodology with learning based approach for protecting systems from DDoS attacks

* , ,

* Corresponding author · click or hover a name for details

pp. 1317–1325Vol. 26Issue 5August 2023DOI: 10.47974/JDMSC-1747 Crossmark XML
Published Online:
09 Sep 2023
Article type:
Research Article
Language:
EN
Article no.:
JDMSC-1747
Pages:
1317–1325

Abstract

Distributed Denial of Service (DDoS) attacks still prevailing in Internet based and cloud based applications. To detect such attacks and mitigate their effect, many approaches came into existence. There are signature based methods, metrics based methods and machine learning (ML) based methods. With the availability of training data, ML based solutions, of late, became popular. However, there is need for evaluation of different ML models for real time usage in distributed applications. We proposed a ML based framework that has mechanisms, including feature selection, to have supervised learning for threat detection. The framework enables workflow required to pre-process data, select essential features, train ML classifiers and detect the DDoS attack and classify it. We also proposed an algorithm known as DDoS Attack Detection for Critical Services Protection (DAD-CSP) that takes dataset and ML pipeline as input, exploits the ML models and evaluates them. Feature selection has resulted in dimensionality reduction for improving quality in training. The ML models such as Decision Tree, Naïve Bayes and Random Forest showed different capabilities in attack classification. RF exhibited highest performance with 92% accuracy when compared with other two models. 

Keywords

Cyber securityMachine learningDDoS attack detectionArtificial intelligence

Subject Classifications

68M25

References

[1] Lima Filho, F.S. de, Silveira, F.A.F., de Medeiros Brito Junior, A., Vargas-Solar, G. and Silveira, L.F.  Smart Detection: An Online Approach for DoS/DDoS Attack Detection Using Machine Learning, [online] Security and Communication Networks, P1-16 (2019). 
[2] Alrehan, A.M. and Alhaidari, F.A. Machine Learning Techniques to Detect DDoS Attacks on VANET System: A Survey, 2019 2nd International Conference on Computer Applications & Information Security (ICCAIS), P1-6 (2019). 
[3] Marwane Zekri, Said El Kafhali, Noureddine Aboutabit and Youssef Saadi. DDoS Attack Detection using Machine Learning Techniques in Cloud Computing Environments, 2017 2nd IEEE, 1-7 (2017).
[4] Rejimol Robinson, R.R. and Thomas, C. Ranking of machine learning algorithms based on the performance in classifying DDoS attacks. [online] IEEE Xplore, p185-190 (2015).
[5] Naveen Bindra and Manu Sood. Detecting DDoS Attacks Using Machine Learning Techniques and Contemporary Intrusion Detection Dataset., Automatic Control and Computer Sciences, 53(5), pp. 419–428 (2019).
[6] Rios, V. de M., Inácio, P.R.M., Magoni, D. and Freire, M.M. Detection of reduction-of-quality DDoS attacks using Fuzzy Logic and machine learning algorithms, Computer Networks, 186, p.107792 (2021). 
[7] Saini, P.S., Behal, S. and Bhatia, S. Detection of DDoS Attacks using Machine Learning Algorithms. 2020 7th International Conference on Computing for Sustainable Global Development (INDIACom). P 16-21 (2020).
[8] He, Z., Zhang, T. and Lee, R.B.  Machine Learning Based DDoS Attack Detection from Source Side in Cloud. [online] IEEE Xplore.p 114-120 (2017).
[9] A.DivyaRani, G. Ramesh, K. Madhavi, An Efficient and Effective Framework to Track, Monitor, and Orchestrate Resource Usage in an Infrastructure as a Service, International Journal of Recent Technology and Engineering (IJRTE), Volume-8 Issue-3 (September 2019).
[10] Thirupathi, N., Madhavi, K., Ramesh, G., Sowmya Priya, K. Data Storage in Cloud Using Key-Policy Attribute-Based Temporary Keyword Search Scheme (KP-ABTKS). In: Smys, S., Bestak, R., Rocha, Á. (eds) Inventive Computation Technologies. ICICIT 2019. Lecture Notes in Networks and Systems, Vol 98 (2020). Springer, Cham. 
[11] Reddy, N.M., Ramesh, G., Kasturi, S.B. et. al. Secure data storage and retrieval system using hybridization of orthogonal knowledge swarm optimization and oblique cryptography algorithm in cloud. Appl Nanosci (2022).
[12] Elsayed, M.S., Le-Khac, N.-A., Dev, S. and Jurcut, A.D. Machine-Learning Techniques for Detecting Attacks in SDN. [online] IEEE Xplore. P 277-281 (2019).
[13] Wani, A.R., Rana, Q.P., Saxena, U. and Pandey, N. Analysis and Detection of DDoS Attacks on Cloud Computing Environment using Machine Learning Techniques, Amity International Conference on Artificial Intelligence (AICAI). P 870-876 (2019).
[14] Irfan Sofi, Amit Mahajan and Vibhakar Mansotra. Machine Learning Techniques used for the Detection and Analysis of Modern Types of DDoS Attacks, International Research Journal of Engineering and Technology (IRJET). 4, p 1086-1092 (2017).
[15] Wehbi, K., Hong, L., Al-salah, T. and Bhutta, A.A. A Survey on Machine Learning Based Detection on DDoS Attacks for IoT Systems. [online] IEEE Xplore. P 1-6 (2019).

Views: 242Downloads: 8Citations: 27