DDoS attack detection method and device, computer equipment and storage medium

Abstract

The embodiment of the invention discloses a DDoS attack detection method and device, computer equipment and a storage medium. The DDoS attack detection method comprises the following steps: acquiringInternet of Things flow of target equipment; performing feature extraction on the Internet of Things flow according to preset DDoS attack features to obtain joint entropy features; training an extremelearning machine algorithm by using the joint entropy features to obtain a DDoS attack detection algorithm; and carrying out DDoS attack detection by adopting the DDoS attack detection algorithm. According to the embodiment of the invention, the joint entropy features in the Internet of Things flow are extracted; the extreme learning machine algorithm is trained by using the joint entropy features to obtainthe DDoS attack detection algorithm; the DDoS attack detection algorithm can be used for carrying out DDoS attack detection; the features of the DDoS attack are combined, the flow characteristics suitable for the Internet of Things environment are extracted, training and flow detection classification are carried out by adopting the extreme learning machine algorithm, the detection classification accuracy is high, the training time is short, and the DDoS attack in the Internet of Things environment can be accurately and timely detected.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of network security, in particular to a DDoS attack detection method, device, computer equipment and storage medium. Background technique [0002] With the development of the Internet of Things, the number of global Internet of Things devices has grown rapidly, and "Internet of Everything" has become an important direction for the future development of the network. In recent years, security incidents under the Internet of Things have been increasing year by year. The global Internet of Things security spending is keep growing. The lack of security design of IoT devices and their own vulnerabilities, such as the use of a single protocol in the IoT environment, simple and numerous devices, and relatively fixed bandwidth, make IoT devices likely to be manipulated into puppet machines that launch DDoS attacks. Therefore, once the Internet of Things devices are used by hackers, user dat...

AI Technical Summary

Problems solved by technology

[0004] However, the above DDoS attack detection methods are all aimed at the DDoS attack detection method in the Internet environment, and are not suitable for the Internet of Things environment; in addition, the above DDoS attack detection methods also have the disadvantages of high detection time delay and low detection accuracy

Images