In a network environment that become more complex due to the continuous update of emerging Internet technologies, distributed denial of service (DDoS) attacks also become easier to implement and more difficult to detect. Such as in the blockchain environment, the performance of node equipment is often low, the deployment cost of existing detection systems is high, and multi-point collaborative detection cannot be performed. In response to these problems, this paper proposes a lightweight DDoS attack detection method based on LightBGM. The paper proposes a multi-component network traffic feature group to extract the features of network flow to realize the lightweight of DDoS attack detection on the feature input. The experimental results show that the proposed feature group can describe the network flow more accurately. Compared with other DDoS attack detection methods, LightGBM-based methods have higher accuracy, recall and prediction rates, lower error rate and missing rate, while occupying less computing resources.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Method for Lightweight DDoS Attack Detection Based on LightGBM

  • Jinyang Song,
  • Chao Han,
  • Qiao Kang,
  • Weinian Pan,
  • Shengjie Zhai

摘要

In a network environment that become more complex due to the continuous update of emerging Internet technologies, distributed denial of service (DDoS) attacks also become easier to implement and more difficult to detect. Such as in the blockchain environment, the performance of node equipment is often low, the deployment cost of existing detection systems is high, and multi-point collaborative detection cannot be performed. In response to these problems, this paper proposes a lightweight DDoS attack detection method based on LightBGM. The paper proposes a multi-component network traffic feature group to extract the features of network flow to realize the lightweight of DDoS attack detection on the feature input. The experimental results show that the proposed feature group can describe the network flow more accurately. Compared with other DDoS attack detection methods, LightGBM-based methods have higher accuracy, recall and prediction rates, lower error rate and missing rate, while occupying less computing resources.