Presentation 2022-06-09
Conditional entropy based DDoS Attack detection in Software Defined Network
Tian QiWen, miyata sumiko,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) In order to detect each network attack in an SDN environment, an attack detection method has been proposed based on the analysis of the features of the attack and the change of the entropy of each parameter. Entropy is a parameter used in information theory to express a certain degree of order. However, with the increasing complexity of networks and the diversity of attack types, existing researches use a single entropy, which does not discriminate correctly between attacks and normal traffic, and may lead to false positives. In this paper, we propose a DDoS attack detection method that takes into account the special attack methods in SDN environment and also considers the traffic patterns with similar characteristics. Furthermore, we show the effectiveness of the proposed method by numerical analysis.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Entropy / SDN / Attack detection / Abnormal traffic / DDoS / Flash crowds
Paper # NLP2022-1,CCS2022-1
Date of Issue 2022-06-02 (NLP, CCS)

Conference Information
Committee CCS / NLP
Conference Date 2022/6/9(2days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair Megumi Akai(Hokkaido Univ.) / Akio Tsuneda(Kumamoto Univ.)
Vice Chair Masaki Aida(TMU) / Hidehiro Nakano(Tokyo City Univ.) / Hiroyuki Torikai(Hosei Univ.)
Secretary Masaki Aida(TDK) / Hidehiro Nakano(Shibaura Insti. of Tech.) / Hiroyuki Torikai(Sojo Univ.)
Assistant Tomoyuki Sasaki(Shonan Instit. of Tech.) / Hiroyasu Ando(Tsukuba Univ.) / Miki Kobayashi(Rissho Univ.) / " Hiroyuki YASUDA(The Univ. of Tokyo) / Yuichi Yokoi(Nagasaki Univ.) / Yoshikazu Yamanaka(Utsunomiya Univ.)

Paper Information
Registration To Technical Committee on Complex Communication Sciences / Technical Committee on Nonlinear Problems
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Conditional entropy based DDoS Attack detection in Software Defined Network
Sub Title (in English)
Keyword(1) Entropy
Keyword(2) SDN
Keyword(3) Attack detection
Keyword(4) Abnormal traffic
Keyword(5) DDoS
Keyword(6) Flash crowds
1st Author's Name Tian QiWen
1st Author's Affiliation Shibaura Institute of Technology(SIT)
2nd Author's Name miyata sumiko
2nd Author's Affiliation Shibaura Institute of Technology(SIT)
Date 2022-06-09
Paper # NLP2022-1,CCS2022-1
Volume (vol) vol.122
Number (no) NLP-65,CCS-66
Page pp.pp.1-6(NLP), pp.1-6(CCS),
#Pages 6
Date of Issue 2022-06-02 (NLP, CCS)