Spectral analysis of low rate of denial of service attacks detection based on fisher and Siegel tests

摘要

We focus on the detection of Low Rate Denial of Service Attacks (LR DoS) based on their spectral properties. We revised the Fisher g-statistic test and Siegel test for detection of LR DoS attacks such as Shrew and New Shrew attacks. Our results reveal that these attacks can be effectively identified by using Fisher g-statistic test for one dominant periodicity as in the case of Shrew attacks. When multiple (compound) dominant periodicities exist in the case of New Shrew attacks, Siegel test can identify the attack better than Fisher g-statistic test. Our contribution consists in developing a new methodology for rejecting the null hypothesis or identifying LR DoS attacks. Numerical examples for a confidence interval at significance level of ¿¿ = 0.01 and ¿¿ = 0.05 are given for Shrew and New Shrew attacks.