Abstract:By nature, a traditional attack method, denial-of-service (DDoS) attack poses a considerable threat to the security of the blockchain network layer. This paper proposes a distributed DDoS-attack traffic detection method based on a cross multilayer convolutional neural network model in the blockchain network layer. The method resolves the low generalisation, high misreporting rate, and low detection efficiency problems of the existing detection methods, which are caused by nondistinctive core features and the high complexity of robust features when detecting DDoS attacks transmitted by mixed protocols on a blockchain network layer. First, the model performs a convolution operation on preprocessed traffic on the blockchain network layer using a cross-layer method based on L2 regularisation. After this operation, the model can perceive the detailed features of attack traffic from multiple levels while enhancing the representational performance of key features; specifically, the parameters with high-variance terms are penalised to limit changes in the model's weight parameters. The highly robust abstract features of attack traffic are extracted, thereby increasing the generalisation ability and reducing the misreporting rate of the model. Second, parametric encoding of the abstract features is performed by a stacked sparse autoencoder based on Kullback–Leibler divergence, and the sparsity of the model is adjusted to reduce the redundant data and the coupling between abstract features. The outputs of the encoded features are then effectively categorised. Finally, the global optimisation of parameters is performed by an improved random gradient-descent algorithm, which prevents oscillation of the training parameters and accelerates the model convergence. In an experimental evaluation, the proposed method achieved satisfactory binary- and multiclass detection of DDoS-attack traffic on both CSE-CIC-IDS 2018 on the AWS dataset and on the real mixed data of a blockchain network layer.

DDoS Network Attack Detection Technology Based on Double-Stacked LSTM

Low-rate DoS Attack Detection Method Based on Hybrid Deep Neural Networks.

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

DDoS attack detection method based on feature extraction of deep belief network

DDoSNet: A Deep-Learning Model for Detecting Network Attacks

DeepDDoS: Online DDoS Attack Detection

A DDoS-Attack Detection Method Oriented to the Blockchain Network Layer

A DDOS Attack Detection Method Based on Recurrent Neural Network

DDoS Attack Detection and Classification Using Hybrid Model for Multicontroller SDN

DDoS‐MSCT: A DDoS Attack Detection Method Based on Multiscale Convolution and Transformer

Deep Learning-Based Approach for Detecting DDoS Attack on Software-Defined Networking Controller

Network Anomaly Early Warning through Generalized Network Temperature and Deep Learning

Time‐based DDoS attack detection through hybrid LSTM‐CNN model architectures: An investigation of many‐to‐one and many‐to‐many approaches

Two-Layers DDoS Attack Detection Model Using Machine Learning in Software Defined Networking

A BiLSTM-based DDoS Attack Detection Method for Edge Computing

Predict And Prevent DDOS Attacks Using Machine Learning and Statistical Algorithms

DDosTC: A Transformer-Based Network Attack Detection Hybrid Mechanism in SDN

Distributed Denial of Service Attack Detection in Network Traffic Using Deep Learning Algorithm

Spatio-Temporal Graph Convolutional Networks for DDoS Attack Detecting.

A Network Intrusion Detection Model Based on BiLSTM with Multi-Head Attention Mechanism