%0 Journal Article
%T Detecting application-layer DDoS attack based on analysis of users'' behaviors<br>基于用户行为分析的应用层DDoS攻击检测方法*
%A ZHAO Guo-feng
%A YU Shou-cheng
%A WEN Sheng
%A <br>赵国锋
%A 喻守成
%A 文晟
%J 计算机应用研究
%D 2011
%I 
%X Compared with traditional DDoS attack, application-layer DDoS attack has more destructiveness and becomes harder to be detected and defense. Based on user browsing behavior analysis, this paper presented a method for detecting application layer DDoS attacks using auto-regression model. It adopted AR model and Kalman filtering to learn and predict normal user access, the results of which were advancedly used to judge abnormal. The routers were capable of limiting or blocking the attack traffic after locating the attack source accurately. The test result in China Telecom Internet Data Center shows that the method is effective.
%K DDoS
%K application layer
%K user behavior
%K auto-regression mode<br>拒绝服务攻击
%K 应用层
%K 用户行为
%K 自回归模型
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=A9D9BE08CDC44144BE8B5685705D3AED&aid=EBFDFDEA35A5429C09BB3053EA6A240D&yid=9377ED8094509821&vid=D3E34374A0D77D7F&iid=0B39A22176CE99FB&sid=E5ED9059DE792E50&eid=4D0B71A09FA5A2A5&journal_id=1001-3695&journal_name=计算机应用研究&referenced_num=0&reference_num=8