An improved DDoS detection using hybrid N-Gram heuristic technique

• Main Authors: Maslan, Andi, Muhammmad, Kamarudin Malik
• Other Authors: Ibrahim, Rosziati
• Format: Book Section
• Language: English
• Published: Penerbit UTHM 2017
• Subjects: T58.5-58.64 Information technology; TA190-194 Management of engineering works
• Online Access: http://eprints.uthm.edu.my/4350/1/Chapter%206_DEISS_S1.pdf; http://eprints.uthm.edu.my/4350/

Distributed denial-of-service (DDoS) is a type of attack that has existed since 1990, in which the volume and intensity of DDoS continues to increase. At the end of 2014, it was reported that the DDoS attack was the most popular attack technique (ArborNetworks, 2014). Thus, DDoS is one of the major threats of cyberspace and a major cyber security issue. DDoS is referred to as the preferred weapon of hackers as it has proven to be a permanent threat to users, organizations and infrastructure on the Internet (BussinessWeek, 2014). A survey of over 5,000 companies found that 37% of Distributed Denial of Service (DDoS) attacks damaged the company's reputation, causing subscriber trust to decrease. Customer loss and reputation damage is one of the most feared consequences of DDoS attacks (39%). This fear even exceeds the cost of recovery from DDoS attacks (28%), or loss of revenue caused by downtime related to it (26%). The survey also found that more than half of the companies surveyed lost business data (57%), or access to sensitive and important business information (56%). As a result of DDoS attacks also affect the company's trading activities (42%) (Warta Ekonomi.co.id, Jakarta. Juli 2016). On the other hand, network attacks represent a risk to the integrity, confidentiality and availability of resources provided by the organization[1].