Abstract:By nature, a traditional attack method, denial-of-service (DDoS) attack poses a considerable threat to the security of the blockchain network layer. This paper proposes a distributed DDoS-attack traffic detection method based on a cross multilayer convolutional neural network model in the blockchain network layer. The method resolves the low generalisation, high misreporting rate, and low detection efficiency problems of the existing detection methods, which are caused by nondistinctive core features and the high complexity of robust features when detecting DDoS attacks transmitted by mixed protocols on a blockchain network layer. First, the model performs a convolution operation on preprocessed traffic on the blockchain network layer using a cross-layer method based on L2 regularisation. After this operation, the model can perceive the detailed features of attack traffic from multiple levels while enhancing the representational performance of key features; specifically, the parameters with high-variance terms are penalised to limit changes in the model's weight parameters. The highly robust abstract features of attack traffic are extracted, thereby increasing the generalisation ability and reducing the misreporting rate of the model. Second, parametric encoding of the abstract features is performed by a stacked sparse autoencoder based on Kullback–Leibler divergence, and the sparsity of the model is adjusted to reduce the redundant data and the coupling between abstract features. The outputs of the encoded features are then effectively categorised. Finally, the global optimisation of parameters is performed by an improved random gradient-descent algorithm, which prevents oscillation of the training parameters and accelerates the model convergence. In an experimental evaluation, the proposed method achieved satisfactory binary- and multiclass detection of DDoS-attack traffic on both CSE-CIC-IDS 2018 on the AWS dataset and on the real mixed data of a blockchain network layer.

DDoS Attack Detection Based on Global Network Properties of Network Traffic Anomaly

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Global Detection of DDoS Attack Based on Time and Frequency Analysis

Global Abnormal Correlation Analysis for DDoS Attack Detection

Detection of low-rate DDoS attack based on self-similarity

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

Combining cross-correlation and fuzzy classification to detect distributed denial-of-service attacks

A novel DDoS attack detection method

Detecting DDoS Attacks Based on Network Connection Statistics

DDoS Attack Detection Method Based on Network Abnormal Behavior in Big Data Environment

Group Testing Based Detection of Web Service DDoS Attackers.

Distributed Denial of Service (DDoS) detection by traffic pattern analysis

Detecting DDoS Attacks Against Data Center with Correlation Analysis.

A DDoS-Attack Detection Method Oriented to the Blockchain Network Layer

A Detection Model for Distributed Denial of Service Attacks Based on Network Connection Analysis

LDoS attack detection method based on traffic time-frequency characteristics

A New Multistage Approach to Detect Subtle DDoS Attacks.

A Method of Run-Time Detecting Ddos Attacks

Low-rate DDoS attacks detection method using data compression and behavior divergence measurement

DDoS Attacks Detection Based on Link Character