A Neural-Network Based DDoS Detection System Using Hadoop and HBase

• DOI: 10.1109/hpcc-css-icess.2015.38
• Publication Date: 2015-11-30T21:52:33Z
• Authors: Teng Zhao; Dan Chia-Tien Lo; Kai Qian
• Keywords: 0202 electrical engineering, electronic engineering, information engineering; 02 engineering and technology

This paper presents a detection system for theDistributed Denial of Service (DDoS) attack based on neuralnetwork, which is implemented in the Apache Hadoop clusterand the HBase system. While there are already manyapproaches for the DDoS detection, there are two mainchallenges: the learning capability of a DDoS detection systemand the ability to process a huge unstructured dataset. Themain contribution of this paper is to develop a DDoS detectionsystem with learning capability to adapt to new types of DDoSattacks and ability to store and analyze a huge unstructureddataset collected from network logs. Particularly, a neuralnetwork architecture is designed for the DDoS detectionsystem, and a list of training samples is developed to train theneural network. This approach is validated with a series ofgenerated datasets of different scenarios. It was shown that thesystem with the well-trained neural network is able to detectDDoS attacks efficiently and successfully.