Abstract:By nature, a traditional attack method, denial-of-service (DDoS) attack poses a considerable threat to the security of the blockchain network layer. This paper proposes a distributed DDoS-attack traffic detection method based on a cross multilayer convolutional neural network model in the blockchain network layer. The method resolves the low generalisation, high misreporting rate, and low detection efficiency problems of the existing detection methods, which are caused by nondistinctive core features and the high complexity of robust features when detecting DDoS attacks transmitted by mixed protocols on a blockchain network layer. First, the model performs a convolution operation on preprocessed traffic on the blockchain network layer using a cross-layer method based on L2 regularisation. After this operation, the model can perceive the detailed features of attack traffic from multiple levels while enhancing the representational performance of key features; specifically, the parameters with high-variance terms are penalised to limit changes in the model's weight parameters. The highly robust abstract features of attack traffic are extracted, thereby increasing the generalisation ability and reducing the misreporting rate of the model. Second, parametric encoding of the abstract features is performed by a stacked sparse autoencoder based on Kullback–Leibler divergence, and the sparsity of the model is adjusted to reduce the redundant data and the coupling between abstract features. The outputs of the encoded features are then effectively categorised. Finally, the global optimisation of parameters is performed by an improved random gradient-descent algorithm, which prevents oscillation of the training parameters and accelerates the model convergence. In an experimental evaluation, the proposed method achieved satisfactory binary- and multiclass detection of DDoS-attack traffic on both CSE-CIC-IDS 2018 on the AWS dataset and on the real mixed data of a blockchain network layer.

A Defense Technique Against DoS/DDoS Attack Based on Bayes Classifier

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

A Method Based on AMHI for DDoS Attacks Detection and Defense

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

A feature selection-based method for DDoS attack flow classification

Optimal Defense Strategies for DDoS Defender Using Bayesian Game Model

DDoS detection and analysis system based on comprehensive scoring

DDoS Defense Method in Software-Defined Space-Air-Ground Network from Dynamic Bayesian Game Perspective

Design a Hybrid Flooding Attack Defense Scheme under the Cloud Computing Environment

Efficient Based on Improved Random Forest Defense System Against Application‐Layer DDoS Attacks

A confidence-based filtering method for DDoS attack defense in cloud environment

A METHOD FOR DDoS ATTACKS PREVENTION BASED ON INTERACTION ACTIVITY

DDoS Attack Defense in Big Data-oriented Urban Rail Transit Safety Evaluation System

DDoS Mitigation Based on Token Bucket Arrays

A DDoS-Attack Detection Method Oriented to the Blockchain Network Layer

DDoS Attack Detection Method Based on Network Abnormal Behavior in Big Data Environment

An Approach of Defending Against DDoS Attack

DDoS attack detection method based on feature extraction of deep belief network

Low-rate DDoS attacks detection method using data compression and behavior divergence measurement