Access Model of Web Users Based on Multi-chains Hidden Markov Models

Author

Zheng, Kangfeng ; Yang, Yixian ; Wang, Xiujuan ; Guo, Shize

Author_Institution

Key Lab. of Network & Inf. Attack & Defence Technol. of MOE, Beijing Univ. of Posts & Telecommun., Beijing, China

fYear

2009

fDate

21-22 Dec. 2009

Firstpage

73

Lastpage

77

Abstract

How to distinguish abnormal access from normal ones is the key problem in Distribution Denial of service(DDoS) attack detection. This research aims at finding out the major difference between the abnormal access and the normal ones in application layer. To this end, the paper conducts modeling on Web users´ access behaviors based on hidden Markov model(HMM) with multiple chains and puts forward a method to identify abnormal access. Tests on simulation data indicate that this model can undo Web users access to a certain degree and discern the abnormal access well.

Keywords

Internet; behavioural sciences computing; computer network security; hidden Markov models; user interfaces; Web access; Web user; abnormal access identification; application layer; distribution denial of service attack; multichain hidden Markov model; user access behaviour; Computer crime; Computer networks; Distributed computing; Hidden Markov models; IP networks; Telecommunication traffic; Testing; Web and internet services; Web pages; Web services; DoS; HMM; Web user access;

fLanguage

English

Publisher

ieee

Conference_Titel

Internet Computing for Science and Engineering (ICICSE), 2009 Fourth International Conference on

Conference_Location

Harbin

Print_ISBN

978-1-4244-6754-9

Type

conf

DOI

10.1109/ICICSE.2009.34

Filename

5521629