Redefining DDoS Attack Detection Using A Dual-Space Prototypical Network-Based Approach

• Published in: arXiv.org
• Main Authors: Martinez, Fernando, Mapkar, Mariyam, Alfatemi, Ali, Rahouti, Mohamed, Xin, Yufeng, Xiong, Kaiqi, Ghani, Nasir
• Format: Paper Journal Article
• Language: English
• Published: Ithaca Cornell University Library, arXiv.org 04.06.2024
• Subjects: Accuracy; Complexity; Computer Science - Cryptography and Security; Computer Science - Learning; Computer Science - Networking and Internet Architecture; Cybersecurity; Deep learning; Denial of service attacks; Machine learning; Multilayer perceptrons; Representations
• ISSN: 2331-8422
• DOI: 10.48550/arxiv.2406.02632

Distributed Denial of Service (DDoS) attacks pose an increasingly substantial cybersecurity threat to organizations across the globe. In this paper, we introduce a new deep learning-based technique for detecting DDoS attacks, a paramount cybersecurity challenge with evolving complexity and scale. Specifically, we propose a new dual-space prototypical network that leverages a unique dual-space loss function to enhance detection accuracy for various attack patterns through geometric and angular similarity measures. This approach capitalizes on the strengths of representation learning within the latent space (a lower-dimensional representation of data that captures complex patterns for machine learning analysis), improving the model's adaptability and sensitivity towards varying DDoS attack vectors. Our comprehensive evaluation spans multiple training environments, including offline training, simulated online training, and prototypical network scenarios, to validate the model's robustness under diverse data abundance and scarcity conditions. The Multilayer Perceptron (MLP) with Attention, trained with our dual-space prototypical design over a reduced training set, achieves an average accuracy of 94.85% and an F1-Score of 94.71% across our tests, showcasing its effectiveness in dynamic and constrained real-world scenarios.