Detection for Application-layer Denial of Service Attack based on Cluster Analysis

Abstract

Denial of service attack is evolving from the network layer to the application layer in recent years. Their characteristics show that attack in the application layer is more secret with less data traffic compared with that in the network layer, and it's more difficult to defend this kind of attack, so we propose the model of application-oriented detection for denial of service attack which involves an aggregation algorithm for application partition, monitoring running status of application system, detecting abnormal information, and assessing threat level of malicious access source. Through modelling and verification of actual problem, we expound upon the effectiveness and practicality of this model. 2015 18-19, December, ISCC