Method of Early Detection of Cyber-Attacks on Telecommunication Networks Based on Traffic Analysis by Extreme Filtering

Authors:
Open Access
Publisher website
Google Scholar
Abstract
The paper suggests a method of early detection of cyber-attacks by using DDoS attacks as an example) using the method of extreme filtering in a mode close real time. The process of decomposition of the total signal (additive superposition of attacking and legitimate effects) and its decomposition using the method of extreme filtering is simulated. A profile model of a stochastic network is proposed. This allows to specify the influence of the intruder on the network using probabilistic-time characteristics. Experimental evaluation of metrics characterizing the cyber-attack is given. It is demonstrated how obtained values of metrics confirm the process of attack preparation, for instance the large-scaled telecommunication network, which includes the proposed method for early detection of attacks, has a recovery time of no more than 9 s, and the parameters of quality of service remain in an acceptable range.
Funding Information
  • Российский Фонд Фундаментальных Исследований (РФФИ) (16-29-09482, 18-37-20047, 18-07-01488, 18-07-01369 and 18-29-22034)
  • Government of the Russian Federation (08-08)
  • The budget (0073-2019-0002)

This publication has 37 references indexed in Scilit: