Abstract:Cloud computing is integrated lots of computing resources which are provided to users over the Internet on a Pay-As-You-Go mode. While multi-tenants and resources sharing are its advantages under the cloud computing environment, it also brings new risks in information security. One of the more difficult consequences of an attack is a flooding attack. This attack is to exhaust the network bandwidth and the computing resources of the server, causing the server to fail to provide services due to heavy workload and may affect the normal service. Other servers in the same infrastructure cause unpredictable losses. Based on the existing DDoS detection technology, this paper proposes a prevention mechanism based on feature selection and random forest classification models to detect hybrid flooding attacks, called HFADS. The HFADS scheme is mainly divided into three modules: (1) Resource Monitor Module (2) Data Features Selection Module (3) Machine Learning Evaluation Module. Based on the above three modules, we perform some simulations for HFADS to be compared with Mouhammd Alkasassbeh et al.'s method to detect flooding attacks of DDoS in terms of three KPIs including recall rate, accuracy rate and average processing time. The final experimental results indicate that HFADS can achieve 99.99% for UDP, 99.95% for ICMP and 99.99% for HTTP in recall rate, 99.98% in accuracy rate and 65.34 seconds in average processing time. Consequently, the proposed HFADS is more effective and efficient than Mouhammd Alkasassbeh et al.'s method for the identification of hybrid flooding attacks.

SEYARN: Enhancing Security of YARN Clusters Based on Health Check Service

SEINA: A Stealthy and Effective Internal Attack in Hadoop Systems

Distributed Model Based on Data Partition and Load Balance Algorithm

Secapacity: A Secure Capacity Scheduler In Yarn

Modeling and Defending Advanced Metering Infrastructure Subjected to Distributed Denial-of-Service Attacks

Invader Job: A Kind Of Malicious Failure Job On Hadoop Yarn

Yadoop: an Elastic Resource Management Solution of YARN.

Distributed Shielded Execution for Transmissible Cyber Threats Analysis

Accommodate Apache YARN to long-lived services

SAF: Simulated Annealing Fair Scheduling for Hadoop Yarn Clusters

Eavesdropper: A Framework for Detecting the Location of the Processed Result in Hadoop.

Research on the Framework and Resource Scheduling Mechanisms of Hadoop YARN

SeEagle: Semantic-Enhanced Anomaly Detection for Securing Eagle

AutoAdmin: Automatic and Dynamic Resource Reservation Admission Control in Hadoop YARN Clusters

A Novel Hadoop Security Model for Addressing Malicious Collusive Workers

Securing SCADA Energy Management System under DDos Attacks Using Token Verification Approach

A hybrid method of entropy and SSAE-SVM based DDoS detection and mitigation mechanism in SDN

TDSC: Two-Stage DDoS Detection and Defense System Based on Clustering

Hadoop-Based Healthcare Information System Design and Wireless Security Communication Implementation

Design a Hybrid Flooding Attack Defense Scheme under the Cloud Computing Environment

A Novel Approach for Improving Security and Storage Efficiency on HDFS