Abstract:In recent times, I've encountered a principle known as cloud computing, a model that simplifies user access to data and computing power on a demand basis. The main objective of cloud computing is to accommodate users' growing needs by decreasing dependence on human resources, minimizing expenses, and enhancing the speed of data access. Nevertheless, preserving security and privacy in cloud computing systems pose notable challenges. This issue arises because these systems have a distributed structure, which is susceptible to unsanctioned access - a fundamental problem. In the context of cloud computing, the provision of services on demand makes them targets for common assaults like Denial of Service (DoS) attacks, which include Economic Denial of Sustainability (EDoS) and Distributed Denial of Service (DDoS). These onslaughts can be classified into three categories: bandwidth consumption attacks, specific application attacks, and connection layer attacks. Most of the studies conducted in this arena have concentrated on a singular type of attack, with the concurrent detection of multiple DoS attacks often overlooked. This article proposes a suitable method to identify four types of assaults: HTTP, Database, TCP SYN, and DNS Flood. The aim is to present a universal algorithm that performs effectively in detecting all four attacks instead of using separate algorithms for each one. In this technique, seventeen server parameters like memory usage, CPU usage, and input/output counts are extracted and monitored for changes, identifying the failure point using the CUSUM algorithm to calculate the likelihood of each attack. Subsequently, a fuzzy neural network is employed to determine the occurrence of an attack. When compared to the Snort software, the proposed method's results show a significant improvement in the average detection rate, jumping from 57% to 95%.

Distributed denial of service attack detection based on IP Flow Interaction

DM-CIFA: Detection and Mitigation of Collusion Interesting Flooding Attacks in NDNs

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Combining cross-correlation and fuzzy classification to detect distributed denial-of-service attacks

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Flow Anomaly Telemetry Driven by Programmable Data Plane

A Lightweight Ddos Flooding Attack Detection Algorithm Based On Synchronous Long Flows

DDoS Attack Detection Method Based on Network Abnormal Behavior in Big Data Environment

A Flow is a Stream of Packets: A Stream-Structured Data Approach for DDoS Detection

A feature selection-based method for DDoS attack flow classification

Identifying Hybrid DDoS Attacks in Deterministic Machine-to-Machine Networks on a Per-Deterministic-Flow Basis

DDoSMiner: an Automated Framework for DDoS Attack Characterization and Vulnerability Mining.

Detecting SYN Flooding Agents under Any Type of IP Spoofing

A fast all-packets-based DDoS attack detection approach based on network graph and graph kernel

A New Multistage Approach to Detect Subtle DDoS Attacks.

Towards Detecting Flooding DDOS Attacks Over Software Defined Networks Using Machine Learning Techniques

DDoS Attack Detection under SDN Context

DDoS attack detection method based on conditional random field with feature set

FIDS: Fuzzy Intrusion Detection System for simultaneous detection of DoS/DDoS attacks in Cloud computing

Router based detection for low-rate agents of DDoS attack

An Approach of Defending Against DDoS Attack