DDOS DETECTION METHOD USING FAST INFORMATION ENTROPY AND ADAPTIVE MOVING AVERAGE WINDOW DETECTOR

摘要

PURPOSE: a kind of DDoS detection methods make network administrator using snap information entropy and adaptive rolling average window detector to confirm the method for ddos attack. ;CONSTITUTION: snap information entropy detector includes packet extractor, quick entropy memory block, quick entropy calculator and attack detection module. Quick entropy calculator calculates entropy, utilizes snap information entropy. Attack the threshold value of decision module more new change, additional threshold value that no setting is required. Attack the network of decision module detection ddos attack. ;The 2012 of copyright KIPO submissions