The Internet was originally designed to work on mutural trust between machines. This paradigm assisted the growth and spread of the Internet, but ironically, it is also this trust that assists attackers in covering their tracks. Accountability was never a factor while designing the Internet. Now, the one of the powerful attacks is DoS attack. To detect DoS attack, We propose a new approach for detection toward a DoS and DDoS attack We use LRU cache filter and Wavelet approach to analyze characteristics of network traffic anomalies. We consider elicit changes in the wavelet variance to be a potential DoS attack, and compare wavelet variance with flow profile to validate attack.
展开▼
