An integrated intelligent paradigm to detect DDoS attack in mobile ad hoc networks. (2016)

• Record Type: Journal Article
• Authors: Devi, P.; Kannammal, A.
• Is Part Of: International journal of embedded systems. Volume 8:Number 1(2016)
• Page Start: 69
• Page End: 77
• Publication Date: 2016
• Subjects: mobile ad hoc networks -- MANETs -- network security -- DDoS attacks -- DDoS detection -- cluster analysis -- entropy reduction -- statistical analysis -- feature extraction -- feature ranking -- distributed denial of service -- clustering -- legitimate data packets -- malicious data packets -- intrusion detection -- detection time -- false alarms -- complexity; Embedded computer systems -- Periodicals; 004.16
• Languages: English
• ISSNs: 1741-1068

Abstract

Various types of routing attacks and their corresponding countermeasures for mobile ad hoc networks (MANETs) have been identified in the literature study. However problems of computational complexity and false alarms have not yet been reduced. In this paper, we have proposed a proactive detection mechanism for distributed denial of service (DDoS) which considers feature extraction, reduction of entropy, clustering technique and feature ranking. These techniques are approached by statistical analysis and involved for XOR marking to classify legitimate and malicious data packets. Our system applies detection methodologies on each packet, finds abnormalities during the pre-attack phase itself and filters them. Experiments are done with the 2000 DARPA intrusion detection scenario specific dataset to assess detection time, ratio of false alarms, and complexity. The experimental results show the efficiency of proposed system in detection of DDoS attack with larger reduction of false positive and computational complexity.