This paper presents Athena, a predictive approach using traditional Machine Learning (ML) algorithms to mitigate Distributed Denial of Service (DDoS) attacks. The study begins with collecting a dataset containing normal and malicious DDoS packets. After data preprocessing—cleaning, normalization, categorical feature encoding, handling missing values, and data splitting—the project proceeds to feature extraction via ANOVA, identifying the most relevant network traffic features. The model training involves three ML techniques: Random Forest Classifier, K-Nearest Neighbors (KNN), and Long Short-Term Memory (LSTM). The Random Forest model demonstrates the highest accuracy in predicting DDoS attacks. To enhance model interpretability and feature selection, the study employs Local Interpretable Model-Agnostic Explanations (LIME) and ANOVA. The combined use of Random Forest, KNN, and LSTM, supported by LIME and ANOVA, significantly improves network security. Feature importance analysis highlights critical attributes like pktcount and bytecount. The paper concludes by discussing real-time model deployment and the importance of proactive cybersecurity measures.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Athena: A Forecasting Strategy for DDoS Attack Prevention Using Conventional ML Algorithms

  • Rajdeep Das,
  • Arjun Ghosal,
  • Parul Srivastava,
  • Indrajit De,
  • Amitava Nag

摘要

This paper presents Athena, a predictive approach using traditional Machine Learning (ML) algorithms to mitigate Distributed Denial of Service (DDoS) attacks. The study begins with collecting a dataset containing normal and malicious DDoS packets. After data preprocessing—cleaning, normalization, categorical feature encoding, handling missing values, and data splitting—the project proceeds to feature extraction via ANOVA, identifying the most relevant network traffic features. The model training involves three ML techniques: Random Forest Classifier, K-Nearest Neighbors (KNN), and Long Short-Term Memory (LSTM). The Random Forest model demonstrates the highest accuracy in predicting DDoS attacks. To enhance model interpretability and feature selection, the study employs Local Interpretable Model-Agnostic Explanations (LIME) and ANOVA. The combined use of Random Forest, KNN, and LSTM, supported by LIME and ANOVA, significantly improves network security. Feature importance analysis highlights critical attributes like pktcount and bytecount. The paper concludes by discussing real-time model deployment and the importance of proactive cybersecurity measures.