| Presentation | 2016-03-04 An Autonomous DDoS Backscatter Detection System from Darknet Traffic Yuki Ukawa, Jun Kitazono, Seiichi Ozawa, Tao Ban, Junji Nakazato, Jumpei Shimamura, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | This paper proposes an autonomous DDoS backscatter detection system from UDP darknet traffic. To identify DDoS backscatter, we define 17 features and classify them using an L2-SVM. In addition, to adapt to emergence of new patterns of DDoS attacks, we utilize a one-class SVM to detect outliers and continuously update the L2-SVM classifier. In the experiments, we use a traffic data collected by darknet sensor of NICT for half a year, and show that the proposed system can detect DDoS backscatter with 0.90 in F-measure on average. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | network security / DDoS attacks / machine learning / Support Vector Machine / outlier detection / incremental learning |
| Paper # | ICSS2015-67 |
| Date of Issue | 2016-02-25 (ICSS) |
| Conference Information | |
| Committee | ICSS / IPSJ-SPT |
|---|---|
| Conference Date | 2016/3/3(2days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | Academic Center for Computing and Media Studies, Kyoto University |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | Information and Communication System Security, etc. |
| Chair | Yutaka Miyake(KDDI R&D Labs.) |
| Vice Chair | Takashi Nishide(Univ. of Tsukuba) / Yoshiaki Shiraishi(Kobe Univ.) |
| Secretary | Takashi Nishide(Mitsubishi Electric) / Yoshiaki Shiraishi(NII) |
| Assistant | Katsunari Yoshioka(Yokohama National Univ.) / Kazunori Kamiya(NTT) |
| Paper Information | |
| Registration To | Technical Committee on Information and Communication System Security / Special Interest Group on Security Psychology and Trust |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | An Autonomous DDoS Backscatter Detection System from Darknet Traffic |
| Sub Title (in English) | |
| Keyword(1) | network security |
| Keyword(2) | DDoS attacks |
| Keyword(3) | machine learning |
| Keyword(4) | Support Vector Machine |
| Keyword(5) | outlier detection |
| Keyword(6) | incremental learning |
| 1st Author's Name | Yuki Ukawa |
| 1st Author's Affiliation | Kobe University(Kobe Univ.) |
| 2nd Author's Name | Jun Kitazono |
| 2nd Author's Affiliation | Kobe University(Kobe Univ.) |
| 3rd Author's Name | Seiichi Ozawa |
| 3rd Author's Affiliation | Kobe University(Kobe Univ.) |
| 4th Author's Name | Tao Ban |
| 4th Author's Affiliation | National Institute of Information and Communicatoins Technology(NICT) |
| 5th Author's Name | Junji Nakazato |
| 5th Author's Affiliation | National Institute of Information and Communicatoins Technology(NICT) |
| 6th Author's Name | Jumpei Shimamura |
| 6th Author's Affiliation | clwit Inc.(clwit) |
| Date | 2016-03-04 |
| Paper # | ICSS2015-67 |
| Volume (vol) | vol.115 |
| Number (no) | ICSS-488 |
| Page | pp.pp.123-128(ICSS), |
| #Pages | 6 |
| Date of Issue | 2016-02-25 (ICSS) |