denial service

Future Generation Computer Systems

Distributed Denial of Service (DDoS) attacks can put the communication networks in instability by throwing malicious traffic and requests in bulk over the network. Computer networks form a complex chain of nodes resulting in a formation of vigorous structure. Thus, in this scenario, it becomes a challenging task to provide an efficient and secure environment for the user. Numerous approaches have been adopted in the past to detect and prevent DDoS attacks but lack in providing efficient and reliable attack detection. As a result, there is still notable room for improvement in providing security against DDoS attacks. In this paper, a novel high-efficient approach is proposed named DIDDOS to protect against real-world new type DDoS attacks using Gated Recurrent Unit (GRU) a type of Recurrent Neural Network (RNN). Different classification algorithms such as Gated Recurrent Units (GRU), Recurrent Neural Networks (RNN), Naive Bayes (NB), and Sequential Minimal Optimization (SMO) are utilized to detect and identify DDoS attacks. Performance evaluation metrics like accuracy, recall, f1-score, and precision are used to evaluate the efficiency of the machine and deep learning classifiers. Experimental results yield the highest accuracy of 99.69% for DDoS classification in case of reflection attacks and 99.94% for DDoS classification in case of exploitation attacks using GRU. • Propose an approach named DIDDOS to detect a real-world Distributed Denial of Service (DDoS) cyberattacks and identify the type of DDOS attack. • Evaluate the effectiveness of the DIDDOS using conventional machine learning classifiers and a deep learning approach. • Present a comparative analysis based on Gated Recurrent Unit (GRU), Recurrent neural network(RNN) and machine learning algorithms (i.e., Naive Bayes (NB), Sequential Minimal Optimization (SMO)). • Experimental results conclude that GRU provides efficient detection and identification rate than RNN, other conventional algorithms, and state-of-the-art studies.

DIDDOS: An approach for detection and identification of Distributed Denial of Service (DDoS) cyberattacks using Gated Recurrent Units (GRU)