Filtration Model For DDoS Attack Detection in Real-Time

• Main Author: Ahmed, Abdulghani Ali
• Format: Article
• Language: English
• Published: Penerbit UMP 2015
• Subjects: QA76 Computer software
• Online Access: http://umpir.ump.edu.my/id/eprint/9146/1/Filtration%20Model%20For%20DDoS%20Attack%20Detection%20in%20Real-Time.pdf; http://umpir.ump.edu.my/id/eprint/9146/; http://ijsecs.ump.edu.my/images/archive/vol1/08Abdulghani_IJSECS.pdf
• Institution: Universiti Malaysia Pahang Al-Sultan Abdullah

Filtering traffic of distributed denial of services (DDoS) attack requires extra overhead which mostly results in network performance degradation. This study proposes a filtration model for detecting DDoS attack in real-time without causing negative degradation against network performance. The model investigates network traffic in a scalable way to detect user violations on quality of service regulations. Traffic investigation is triggered only when the network is congested; at that exact moment, burst gateways actually generate an explicit congestion notification to misbehaving users. The misbehaving users are thus further investigated by measuring their consumption ratios of bandwidth. By exceeding the service level agreement bandwidth ratio, user traffic is filtered as malicious traffic. Simulation results demonstrate that the proposed model efficiently monitors malicious traffic and precisely detects DDoS attack.