• Title/Summary/Keyword: source-side detection

Search Result 29, Processing Time 0.032 seconds

Assessment of Collaborative Source-Side DDoS Attack Detection using Statistical Weight (통계적 가중치를 이용한 협력형 소스측 DDoS 공격 탐지 기법 성능 평가)

  • Yeom, Sungwoong;Kim, Kyungbaek
    • KNOM Review
    • /
    • v.23 no.1
    • /
    • pp.10-17
    • /
    • 2020
  • As the threat of Distributed Denial-of-Service attacks that exploit weakly secure IoT devices has spread, research on source-side Denial-of-Service attack detection is being activated to quickly detect the attack and the location of attacker. In addition, a collaborative source-side attack detection technique that shares detection results of source-side networks located at individual sites is also being activated to overcome regional limitations of source-side detection. In this paper, we evaluate the performance of a collaborative source-side DDoS attack detection using statistical weights. The statistical weight is calculated based on the detection rate and false positive rate corresponding to the time zone of the individual source-side network. By calculating weighted sum of the source-side DoS attack detection results from various sites, the proposed method determines whether a DDoS attack happens. As a result of the experiment based on actual DNS request to traffic, it was confirmed that the proposed technique reduces false positive rate 2% while maintaining a high attack detection rate.

Traffic Seasonality aware Threshold Adjustment for Effective Source-side DoS Attack Detection

  • Nguyen, Giang-Truong;Nguyen, Van-Quyet;Nguyen, Sinh-Ngoc;Kim, Kyungbaek
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.13 no.5
    • /
    • pp.2651-2673
    • /
    • 2019
  • In order to detect Denial of Service (DoS) attacks, victim-side detection methods are used popularly such as static threshold-based method and machine learning-based method. However, as DoS attacking methods become more sophisticated, these methods reveal some natural disadvantages such as the late detection and the difficulty of tracing back attackers. Recently, in order to mitigate these drawbacks, source-side DoS detection methods have been researched. But, the source-side DoS detection methods have limitations if the volume of attack traffic is relatively very small and it is blended into legitimate traffic. Especially, with the subtle attack traffic, DoS detection methods may suffer from high false positive, considering legitimate traffic as attack traffic. In this paper, we propose an effective source-side DoS detection method with traffic seasonality aware adaptive threshold. The threshold of detecting DoS attack is adjusted adaptively to the fluctuated legitimate traffic in order to detect subtle attack traffic. Moreover, by understanding the seasonality of legitimate traffic, the threshold can be updated more carefully even though subtle attack happens and it helps to achieve low false positive. The extensive evaluation with the real traffic logs presents that the proposed method achieves very high detection rate over 90% with low false positive rate down to 5%.

Attention Based Collaborative Source-Side DDoS Attack Detection (어텐션 기반 협업형 소스측 분산 서비스 거부 공격 탐지)

  • Hwisoo Kim;Songheon Jeong;Kyungbaek Kim
    • The Transactions of the Korea Information Processing Society
    • /
    • v.13 no.4
    • /
    • pp.157-165
    • /
    • 2024
  • The evolution of the Distributed Denial of Service Attack(DDoS Attack) method has increased the difficulty in the detection process. One of the solutions to overcome the problems caused by the limitations of the existing victim-side detection method was the source-side detection technique. However, there was a problem of performance degradation due to network traffic irregularities. In order to solve this problem, research has been conducted to detect attacks using a collaborative network between several nodes based on artificial intelligence. Existing methods have shown limitations, especially in nonlinear traffic environments with high Burstness and jitter. To overcome this problem, this paper presents a collaborative source-side DDoS attack detection technique introduced with an attention mechanism. The proposed method aggregates detection results from multiple sources and assigns weights to each region, and through this, it is possible to effectively detect overall attacks and attacks in specific few areas. In particular, it shows a high detection rate with a low false positive of about 6% and a high detection rate of up to 4.3% in a nonlinear traffic dataset, and it can also confirm improvement in attack detection problems in a small number of regions compared to methods that showed limitations in the existing nonlinear traffic environment.

Analytical-numerical formula for estimating the characteristics of a cylindrical NaI(Tl) gamma-ray detector with a side-through hole

  • Thabet, Abouzeid A.;Badawi, Mohamed S.
    • Nuclear Engineering and Technology
    • /
    • v.54 no.10
    • /
    • pp.3795-3802
    • /
    • 2022
  • NaI(Tl) scintillation materials are considered to be one of many materials that are used exclusively for γ-ray detection and spectroscopy. The gamma-ray spectrometer is not an easy-to-use device, and the accuracy of the numerical values must be carefully checked based on the rules of the calibration technique. Therefore, accurate information about the detection system and its effectiveness is of greater importance. The purpose of this study is to estimate, using an analytical-numerical formula (ANF), the purely geometric solid angle, geometric efficiency, and total efficiency of a cylindrical NaI(Tl) γ-ray detector with a side-through hole. This type of detector is ideal for scanning fuel rods and pipelines, as well as for performing radio-immunoassays. The study included the calculation of the complex solid angle, in combination with the use of various points like gamma sources, located axially and non-axially inside the through detector side hole, which can be applied in a hypothetical method for calibrating the facility. An extended γ-ray energy range, the detector, source dimensions, "source-to-detector" geometry inside the side-through hole, path lengths of γ-quanta photons crossing the facility, besides the photon average path length inside the detector medium itself, were studied and considered. This study is very important for an expanded future article where the radioactive point source can be replaced by a volume source located inside the side-trough hole of the detector, or by a radioactive pipeline passing through the well. The results provide a good and useful approach to a new generation of detectors that can be used for low-level radiation that needs to be measured efficiently.

Analysis and Control of Instantaneous Voltage Compensator Using New Phase Angle Detection Method Synchronized by Positive Sequence of Unbalanced 3-Phase Source (3상 불평형 전원 시스템의 새로운 위상각 검출기법을 이용한 순간전압보상기의 해석 및 제어)

  • 이승요;고재석;목형수;최규하
    • The Transactions of the Korean Institute of Power Electronics
    • /
    • v.4 no.3
    • /
    • pp.275-284
    • /
    • 1999
  • Unbalanced source voltage in the 3-phase power system is decomposed into positive, negative and zero sequence c components. Also, assuming there is no neutral path in the system, the zero sequence component is not shown on the l load side. Therefore, in the unbalanced power system without neutral path. it is possible to provide balanced voltage to t the load side by compensating negative sequence component and also to regulate the voltage amplitude by controlling t the positive sequence component. In addition, the symmetrical components due to voltage unbalance can be effectively d detected on the synchronous reference frame by using dlongleftarrowq transformation. In this paper, an algorithm not only c compensating unbalanced source voltage by canceling the negative sequence component on the synchronous reference f frame but also maintaining load voltages constantly is proposed. Also a novel method for phase angle detection s synchronized by positive sequence component under unbalanced source voltage is suggested and this detected phase a angle is used for d-q transformation. The performances and characteristics of the proposed compensating system are a analyzed by simulation and verified through experimental results.

  • PDF

Location of Partial Discharge in Power Transformer Using Ultrasonic Signal's Characteristic with Medium. (매질에 따른 초음파 신호의 특성을 이용한 변압기내 부분방전 위치 추정)

  • Seo, In-Chul;Kim, Young-No;Jeon, Young-Jae;Kim, Jae-Chul
    • Proceedings of the KIEE Conference
    • /
    • 2000.11a
    • /
    • pp.136-138
    • /
    • 2000
  • This paper describes an efficient location detection algorithm for a partial discharge(PD) source in the transformer. The algorithm is previously proposed is not suitable for PD source detection because ultrasonic signal is diminished through the inner structure. In this paper, the proposal algorithm find PD source using geometry method and 3th sensor on the one side of transformer without diminution of ultrasonic signal. The proposed algorithm demonstrates the effectiveness and validity on model transformer.

  • PDF

Coherent optical transmission experiment using FSK modulation and heterodyne detection scheme (FSK/Heterodyne 변복조 방식에 의한 코히런트 광송수신 실험)

  • 박희갑
    • Proceedings of the Optical Society of Korea Conference
    • /
    • 1991.06a
    • /
    • pp.121-125
    • /
    • 1991
  • A basic coherent optical transmission was demonstrated using FSK modulation and heterodyne detection scheme. Optical frequency of DFB LD light source at the transmitter side was stabilized with Fabry Perot etalon and bias feedback circuit. A tunable external cavity LD was used as a local oscillator at the receiver. Heterodyned output signal at IF frequency of 2GHz was measured and discussed.

  • PDF

INTELLIGENT MIRROR ADJUSTMENT SYSTEM USING A DRIVER′S PUPILS

  • Rho, K.H.;Han, M.H.
    • International Journal of Automotive Technology
    • /
    • v.5 no.4
    • /
    • pp.277-285
    • /
    • 2004
  • This paper describes an intelligent mirror adjustment system that rotates a pair of side mirrors and the room mirror of a car to the optimal position for a driver by using the location of the driver's pupils. A stereo vision system measures the three-dimensional coordinates of a pair of pupils by analyzing the input images of stereo B/W CCD cameras mounted on the instrument panel. This system determines the position angle of each mirror on the basis of information about the location of the pupils and rotates each mirror to the appropriate position by mirror actuators. The vision system can detect the driver's pupils regardless of whether it is daytime or nighttime by virtue of an infrared light source. Information about the pair of nostrils is used to improve the correctness of pupil detection. This system can adjust side mirrors and the room mirror automatically and rapidly by a simple interface regardless of driver replacement or driver's posture. Experiment has shown this to be a new mirror adjustment system that can make up for the weak points of previous mirror adjustment systems.

Automatic Mirror Adjustment Systems Using the Location of the Driver`s Pupils (운전자 눈동자 위치를 이용한 이러 자동 조절 시스템)

  • No, Gwang-Hyeon;Park, Gi-Hyeon;Jo, Jun-Su;Han, Min-Hong
    • Journal of Institute of Control, Robotics and Systems
    • /
    • v.7 no.6
    • /
    • pp.523-531
    • /
    • 2001
  • This paper describes and automatic mirror adjustment system that rotates a pair of side mirrors and the room mirror of a car to the optimal position for a driver by using the locating of the driver\`s pupils. A stereo vision system measures 3D coordinates of a pair pupils by analyzing the input images of stereo B/W CCD cameras mounted on the instrument panel. this system determines the position angle of each mir-ror on the basis of information about the location of the pupils and rotates each mirror to the appropriate po-sition by mirror actuators. The vision system can detect the driver\`s pupils regardless of whether it is day-time or nighttime by virtue of an infrared light source. information about the pair of nostrils in used to im- prove the correctness of pupil detection. This system can adjust side mirrors and the room mirror automati- cally and rapidly by a simple interface regardless of driver replacement of driver\`s posture. Experiment has shown this to be a new mirror adjustment system that can make up for the weak points of previous mirror adjustment systems.

  • PDF

Back Fed Earth Fault Detection in Three Wire-Unigrounded Distribution-System By Zero Sequence Admittance (영상어드미턴스에 의한 직접접지 배전방식에서의 역가압 지락사고 검출)

  • Yoo, Myeong-Ho;Kim, Il-Dong;Han, Hong-Seok;Pak, Chul-Won
    • Proceedings of the KIEE Conference
    • /
    • 1993.07a
    • /
    • pp.120-123
    • /
    • 1993
  • This paper presents the developing a new algorithm for detecting the Back fed Earth Fault in three wire-unigrounded distribution system by zero sequence admittance. So called "Backfed Earth Fault" of the electric power distribution line refers to a class of earth faults that the load-side line only is grounded, following after the distribution line broken into two parts, the source-side and the load-side. Because its mechanism differs from that of other earth faults, it is therefore, required to examine. This paper deals with the detailed software of the digital protective relay for Backfed earth fault. In order to prove that the proposed schemes is good, we performed off-line simulation using data from EMTP and ETSA(Electrcity Trust Of South Austrilia). It is shown that the suggested algorithm is never mal operated.

  • PDF