 |
In this paper, propose a DDoS attack detection model inside the cloud because IDS/IPS outside the cloud does not recognize the inside of the cloud. As a detection technique, a technology that detects abnormal traffic by clustering network traffic using the K-medoids algorithm. Divide traffic into three categories: the X-axis, the Y-axis, and the Z-axis. The X-axis is the number of bytes of parameters transmitted per second. The Y-axis is the number of packets transmitted per second as a parameter. The Z-axis is the number of Different origin, same destination, IP pair transmitted per second as parameters. DDoS attacks can be detected when divided by the classification method, and DDoS attacks occurring in the cloud can be detected by mounting them on the cloud's hypervisor. |
IEEE/ICACT20220359 Slide.19
[Big Slide]
[YouTube]