Similarity Measurement of LDoS Flows Variations Based on Edit Distance

• Published in: 2015 International Conference on Information and Communications Technologies (ICT 2015) p. 35
• Main Authors: Sun, ZhiFeng, Zhao, WenTao, Li, Fang, He, Jie, Wang, DongXia
• Format: Conference Proceeding
• Language: English
• Published: Stevenage, UK IET 2015; The Institution of Engineering & Technology
• Subjects: Computer communications; Computer networks and techniques; Data security; Other topics in statistics; packet sequence pattern; end-to-end delay; low-rate denial-of-service attacks; LDoS duration model; time series; LDoS measuring model; computer network security; LDoS flow variation
• ISBN: 9781849199940; 1849199949
• DOI: 10.1049/cp.2015.0225

Low-rate Denial-of-Service (LDoS) attacks have been studied for more than 10 years, but few projects were there in researching the impacts of end-to-end delay have on LDoS flows. In this paper, we propose a new metric to measure the similarity of two time series, the LDoS Measuring Model and the Duration Model to analyze differences in packet sequence pattern. Based on the methods, we reveal a neglected but important facts: End-to-end delay does have impacts on LDoS flows, but the impacts are limited for the periods and durations of LDoS flows, it affects more on the arrival of packets, making them distribute like flushes, which could cause the failure of LDoS attacks.