A Framework For Intelligent DDoS Attack Detection and Response using SIEM and Ontology

In this paper, we propose an intelligent DDoS detection and response framework. It employs a Security Information and Event Management (SIEM) tool to detect different types of DDoS attacks using its incident detection engine. Additionally, it has an inference engine to automatically infer potential countermeasures to respond to and recover from DDoS attacks. The inference system continuously reasons for each reported incident and provides...