首页> 外文期刊>IEEE Transactions on Parallel and Distributed Systems >Resisting Web Proxy-Based HTTP Attacks by Temporal and Spatial Locality Behavior
【24h】

Resisting Web Proxy-Based HTTP Attacks by Temporal and Spatial Locality Behavior

机译:通过时间和空间局部行为抵制基于Web代理的HTTP攻击

获取原文
获取原文并翻译 | 示例
           

摘要

A novel server-side defense scheme is proposed to resist the Web proxy-based distributed denial of service attack. The approach utilizes the temporal and spatial locality to extract the behavior features of the proxy-to-server traffic, which makes the scheme independent of the traffic intensity and frequently varying Web contents. A nonlinear mapping function is introduced to protect weak signals from the interference of infrequent large values. Then, a new hidden semi-Markov model parameterized by Gaussian-mixture and Gamma distributions is proposed to describe the time-varying traffic behavior of Web proxies. The new method reduces the number of parameters to be estimated, and can characterize the dynamic evolution of the proxy-to-server traffic rather than the static statistics. Two diagnosis approaches at different scales are introduced to meet the requirement of both fine-grained and coarse-grained detection. Soft control is a novel attack response method proposed in this work. It converts a suspicious traffic into a relatively normal one by behavior reshaping rather than rudely discarding. This measure can protect the quality of services of legitimate users. The experiments confirm the effectiveness of the proposed scheme.
机译:提出了一种新颖的服务器端防御方案,以抵抗基于Web代理的分布式拒绝服务攻击。该方法利用时间和空间局部性来提取代理到服务器流量的行为特征,这使得该方案独立于流量强度和频繁变化的Web内容。引入了非线性映射功能以保护微弱的信号免受罕见的大数值干扰。然后,提出了一种由高斯混合和伽马分布参数化的新的隐马尔可夫模型,用于描述Web代理的时变流量行为。新方法减少了要估计的参数数量,并且可以表征代理到服务器流量的动态演变,而不是静态统计。介绍了两种不同规模的诊断方法,以满足细粒度和粗粒度检测的要求。软控制是这项工作中提出的一种新颖的攻击响应方法。它通过重塑行为而不是不加选择地将可疑流量转换为相对正常的流量。该措施可以保护合法用户的服务质量。实验证实了该方案的有效性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号