Deep learning approach to DDoS attack with imbalanced data at the application layer

• Main Authors: Rahmad Gunawan, Rahmad Gunawan, Ab. Ghani, Hadhrami, Khamis, Nurulaqilla, Januar Al Amien, Januar Al Amien, Edi Ismanto, Edi Ismanto
• Format: Article
• Language: English
• Published: Universitas Ahmad Dahlan 2023
• Subjects: TK Electrical engineering. Electronics Nuclear engineering
• Online Access: http://eprints.utm.my/107409/1/NurulaqillaKhamis2023_DeepLearningApproachtoDDoSAttack.pdf; http://eprints.utm.my/107409/; http://dx.doi.org/10.12928/TELKOMNIKA.v21i5.24857

A distributed denial of service (DDoS) attack is where one or more computers attack or target a server computer, by flooding internet traffic to the server. As a result, the server cannot be accessed by legitimate users. A result of this attack causes enormous losses for a company because it can reduce the level of user trust, and reduce the company’s reputation to lose customers due to downtime. One of the services at the application layer that can be accessed by users is a web-based lightweight directory access protocol (LDAP) service that can provide safe and easy services to access directory applications. We used a deep learning approach to detect DDoS attacks on the CICDDoS 2019 dataset on a complex computer network at the application layer to get fast and accurate results for dealing with unbalanced data. Based on the results obtained, it is observed that DDoS attack detection using a deep learning approach on imbalanced data performs better when implemented using synthetic minority oversampling technique (SMOTE) method for binary classes. On the other hand, the proposed deep learning approach performs better for detecting DDoS attacks in multiclass when implemented using the adaptive synthetic (ADASYN) method.