A comprehensive revisit to one class classification

Wang, Qi; Huang, Jincai; Feng, Yanghe; Luo, Zhihao; Fan, Changjun; Liang, Xingxing

doi:10.1109/icbda.2017.8078835

Cited by 3 publications

(1 citation statement)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…is situation promotes the development of one-class classification (OCC) model that can well distinguish the target class and nontarget class [21]. At present, OCC methods are widely applied to outlier detections, image denoising, and image anomaly detections [22]. To our knowledge, OCC methods are rarely applied to DDoS attack detections.…”

Section: Introductionmentioning

confidence: 99%

All-Packets-Based Multi-Rate DDoS Attack Detection Method in ISP Layer

Liu

Ren

et al. 2022

Security and Communication Networks

View full text Add to dashboard Cite

Distributed denial of service (DDoS) is a fundamental security problem in the ISP layer of the internet of things. However, most existing DDoS detection methods are based on NetFlow data, which cannot handle the huge detection delay of flow generation and massive network traffic. Besides, it is extremely hard to obtain the real DDoS attack traffic to construct a traditional supervised binary classification model. To solve these problems, this paper proposes a novel all-packets-based DDoS attack detection method (APDD). Firstly, a new probabilistic storage model square sketch is designed, which has structural characteristics of parallelization, accumulation, and recompression. The model and its characteristics are conducive to fast and efficient traffic storage and compression. All network packets are mapped into square sketch, and the compressed square sketch is obtained. Secondly, in order to overcome the problem of poor real DDoS attack samples, only according to the recompressed square sketch of the normal network, a one-class classifier is constructed by generative adversarial networks to form a DDoS attack detection model. The likelihood score of a recompressed square sketch is obtained to judge this square sketch whether or not it belongs to a normal network state. Finally, two real network traffic data sets of the high-throughput network are utilized to evaluate the proposed method. Compared with several existing methods, the experimental results show that the APDD method has good time efficiency and detection performance.

show abstract

Section: Introductionmentioning

confidence: 99%