Mecanismo de detecção de ataques ddos na camada de aplicação

Abstract

As technology advances, both businesses and governments need to be more concerned about security. With the development of technology, whether in cloud computing, internet of things or artificial intelligence, attackers are able to carry out distributed denial of service attacks DDoS at a lower cost and it also becomes increasingly difficult to detect and prevent these attacks. Today there are already several methods used to detect these attacks, such as Turing test, machine learning methods and an approach focused on modeling normal user behavior profiles. Such methods have a good level of efficiency, however they also have some problems such as interfering with the quality of the user experience or having a high computational cost. In this work, a new mechanism for detecting DDoS attacks at the application layer is proposed using a statistical evaluation technique based on the service’s traffic profile. The obtained results demonstrated that the mechanism has a 1% false positive rate for regular traffic and 0% false negative rate for the scenarios tested.