A collaborative prediction approach to defend against amplified reflection and exploitation attacks
An amplified reflection and exploitation-based distributed denial of service (DDoS) attack allows an attacker to launch a volumetric attack on the target server or network. These attacks exploit network protocols to generate amplified service responses through spoofed requests. Spoofing the source a...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
AIMS Press
2023-09-01
|
| Series: | Electronic Research Archive |
| Subjects: | |
| Online Access: | https://www.aimspress.com/article/doi/10.3934/era.2023308?viewType=HTML |
| _version_ | 1797627390147428352 |
|---|---|
| author | Arvind Prasad Shalini Chandra Ibrahim Atoum Naved Ahmad Yazeed Alqahhas |
| author_facet | Arvind Prasad Shalini Chandra Ibrahim Atoum Naved Ahmad Yazeed Alqahhas |
| author_sort | Arvind Prasad |
| collection | DOAJ |
| description | An amplified reflection and exploitation-based distributed denial of service (DDoS) attack allows an attacker to launch a volumetric attack on the target server or network. These attacks exploit network protocols to generate amplified service responses through spoofed requests. Spoofing the source addresses allows attackers to redirect all of the service responses to the victim's device, overwhelming it and rendering it unresponsive to legitimate users. Mitigating amplified reflection and exploitation attacks requires robust defense mechanisms that are capable of promptly identifying and countering the attack traffic while maintaining the availability and integrity of the targeted systems. This paper presents a collaborative prediction approach based on machine learning to mitigate amplified reflection and exploitation attacks. The proposed approach introduces a novel feature selection technique called closeness index of features (CIF) calculation, which filters out less important features and ranks them to identify reduced feature sets. Further, by combining different machine learning classifiers, a voting-based collaborative prediction approach is employed to predict network traffic accurately. To evaluate the proposed technique's effectiveness, experiments were conducted on CICDDoS2019 datasets. The results showed impressive performance, achieving an average accuracy, precision, recall and F1 score of 99.99%, 99.65%, 99.28% and 99.46%, respectively. Furthermore, evaluations were conducted by using AUC-ROC curve analysis and the Matthews correlation coefficient (MCC) statistical rate to analyze the approach's effectiveness on class imbalance datasets. The findings demonstrated that the proposed approach outperforms recent approaches in terms of performance. Overall, the proposed approach presents a robust machine learning-based solution to defend against amplified reflection and exploitation attacks, showcasing significant improvements in prediction accuracy and effectiveness compared to existing approaches. |
| first_indexed | 2024-03-11T10:23:28Z |
| format | Article |
| id | doaj.art-3bd7a731fe724b43902d956b7bacddab |
| institution | Directory Open Access Journal |
| issn | 2688-1594 |
| language | English |
| last_indexed | 2024-03-11T10:23:28Z |
| publishDate | 2023-09-01 |
| publisher | AIMS Press |
| record_format | Article |
| series | Electronic Research Archive |
| spelling | doaj.art-3bd7a731fe724b43902d956b7bacddab2023-11-16T01:31:01ZengAIMS PressElectronic Research Archive2688-15942023-09-0131106045607010.3934/era.2023308A collaborative prediction approach to defend against amplified reflection and exploitation attacksArvind Prasad 0Shalini Chandra1Ibrahim Atoum2Naved Ahmad3Yazeed Alqahhas41. Department of Computer Science, BBA University, Lucknow, India1. Department of Computer Science, BBA University, Lucknow, India2. Department of Computer Science and Information Systems, AlMaarefa University, Riyadh, Saudi Arabia2. Department of Computer Science and Information Systems, AlMaarefa University, Riyadh, Saudi Arabia2. Department of Computer Science and Information Systems, AlMaarefa University, Riyadh, Saudi ArabiaAn amplified reflection and exploitation-based distributed denial of service (DDoS) attack allows an attacker to launch a volumetric attack on the target server or network. These attacks exploit network protocols to generate amplified service responses through spoofed requests. Spoofing the source addresses allows attackers to redirect all of the service responses to the victim's device, overwhelming it and rendering it unresponsive to legitimate users. Mitigating amplified reflection and exploitation attacks requires robust defense mechanisms that are capable of promptly identifying and countering the attack traffic while maintaining the availability and integrity of the targeted systems. This paper presents a collaborative prediction approach based on machine learning to mitigate amplified reflection and exploitation attacks. The proposed approach introduces a novel feature selection technique called closeness index of features (CIF) calculation, which filters out less important features and ranks them to identify reduced feature sets. Further, by combining different machine learning classifiers, a voting-based collaborative prediction approach is employed to predict network traffic accurately. To evaluate the proposed technique's effectiveness, experiments were conducted on CICDDoS2019 datasets. The results showed impressive performance, achieving an average accuracy, precision, recall and F1 score of 99.99%, 99.65%, 99.28% and 99.46%, respectively. Furthermore, evaluations were conducted by using AUC-ROC curve analysis and the Matthews correlation coefficient (MCC) statistical rate to analyze the approach's effectiveness on class imbalance datasets. The findings demonstrated that the proposed approach outperforms recent approaches in terms of performance. Overall, the proposed approach presents a robust machine learning-based solution to defend against amplified reflection and exploitation attacks, showcasing significant improvements in prediction accuracy and effectiveness compared to existing approaches.https://www.aimspress.com/article/doi/10.3934/era.2023308?viewType=HTMLcybersecuritymachine learningreflection attackexploitation attackddos attack |
| spellingShingle | Arvind Prasad Shalini Chandra Ibrahim Atoum Naved Ahmad Yazeed Alqahhas A collaborative prediction approach to defend against amplified reflection and exploitation attacks Electronic Research Archive cybersecurity machine learning reflection attack exploitation attack ddos attack |
| title | A collaborative prediction approach to defend against amplified reflection and exploitation attacks |
| title_full | A collaborative prediction approach to defend against amplified reflection and exploitation attacks |
| title_fullStr | A collaborative prediction approach to defend against amplified reflection and exploitation attacks |
| title_full_unstemmed | A collaborative prediction approach to defend against amplified reflection and exploitation attacks |
| title_short | A collaborative prediction approach to defend against amplified reflection and exploitation attacks |
| title_sort | collaborative prediction approach to defend against amplified reflection and exploitation attacks |
| topic | cybersecurity machine learning reflection attack exploitation attack ddos attack |
| url | https://www.aimspress.com/article/doi/10.3934/era.2023308?viewType=HTML |
| work_keys_str_mv | AT arvindprasad acollaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT shalinichandra acollaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT ibrahimatoum acollaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT navedahmad acollaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT yazeedalqahhas acollaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT arvindprasad collaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT shalinichandra collaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT ibrahimatoum collaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT navedahmad collaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks AT yazeedalqahhas collaborativepredictionapproachtodefendagainstamplifiedreflectionandexploitationattacks |