An LDoS attack detection method based on multi-feature fusion and a CNN algorithm

Abstract

The invention discloses a slow denial of service (LDoS) attack detection method based on multi-feature fusion and a convolutional neural network (CNN) algorithm, and belongs to the field of network security. The method comprises the following steps: obtaining related data messages in a network key routing node in unit time to form a training sample and a test sample; Performing feature calculationon the training sample and the test sample, and generating a corresponding feature map; Using the feature map of the training sample to train a CNN model, enabling the CNN model to learn and memorizethe features of the slow denial of service attack, and finally obtaining a model which can be used for detecting the slow denial of service attack; And detecting the feature map of the test sample byusing the trained CNN model, and judging whether a slow denial of service attack occurs in a unit time corresponding to the feature map according to a judgment criterion. The detection method based on multi-feature fusion and the CNN algorithm provided by the invention can detect the slow denial of service attack in the network in a high-precision and self-adaptive manner.

Description

technical field [0001] The invention belongs to the field of computer network security, in particular to a slow denial of service (LDoS) attack detection method based on multi-feature fusion and convolutional neural network (CNN) algorithm. Background technique [0002] Denial of service (DoS) attack has developed to the present, and its forms are ever-changing. Usually, any attack method that can make the server unable to provide normal services or reduce the performance of the server through legal means belongs to the category of denial of service attacks, and the object of the attack can be any networked computer, router or the entire network. The slow denial of service attack is one of the variants, which is more difficult to detect and more threatening than the traditional denial of service attack. [0003] So far, although many people have proposed many methods, there is still no mature solution. At present, there are two problems in the detection of slow denial of s...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the low detection accuracy and poor adaptive ability of traditional slow denial-of-service attack detection methods, a slow denial-of-service attack detection method is proposed.

Images