FIELD: physics.
SUBSTANCE: invention relates to a method of detecting and counteracting denial of service attacks. Disclosed is a method during which, by processing network traffic, a training table is formed, wherein network characteristics and interaction characteristics are used to form, a neural network of the auto-encoder type is trained, creating tables of threshold values of network characteristics and interactions, then forming the test table, calculating the average reconstruction error for the test table, if threshold values are exceeded, all packets from an external digital data transmission network are blocked from passing to the local digital data transmission network, for which the set of two IP addresses, protocol and server port matches one of the abnormal interactions.
EFFECT: high probability of detecting and protecting against types of denial-of-service attacks using attack source IP address substitution, distributed attacks, deflected attacks and denial-of-service attacks with increasing activity.
1 cl, 13 tbl
Title | Year | Author | Number |
---|---|---|---|
METHOD FOR DETECTING ANOMALOUS NETWORK TRAFFIC | 2023 |
|
RU2811840C1 |
METHOD FOR DETECTING ANOMALOUS WORK OF NETWORK SERVER (OPTIONS) | 2016 |
|
RU2630415C2 |
METHOD FOR DETECTING NORMAL REACTIONS OF COMPUTER NETWORK NODES TO NETWORK PACKETS RELATED TO UNKNOWN TRAFFIC | 2022 |
|
RU2802164C1 |
METHOD FOR DETECTING ANOMALIES IN OPERATION OF AUTOMATED SYSTEM NETWORK | 2020 |
|
RU2738460C1 |
SYSTEM AND METHOD OF REDUCING FALSE RESPONSES WHEN DETECTING NETWORK ATTACK | 2011 |
|
RU2480937C2 |
METHOD OF DETECTING NETWORK ATTACKS BASED ON ANALYZING FRACTAL TRAFFIC CHARACTERISTICS IN AN INFORMATION COMPUTER NETWORK | 2019 |
|
RU2713759C1 |
METHOD FOR DETECTION OF ANOMALIES IN OPERATION OF HIGHLY LOADED NETWORK OF AUTOMATED TELECOMMUNICATION SYSTEM | 2021 |
|
RU2787078C1 |
SYSTEMS AND METHODS FOR REPORTING COMPUTER SECURITY INCIDENTS | 2019 |
|
RU2757597C1 |
METHOD FOR AUTOMATIC CLASSIFICATION OF NETWORK TRAFFIC BASED ON HEURISTIC ANALYSIS | 2018 |
|
RU2690758C1 |
DDoS-ATTACKS DETECTION SYSTEM AND METHOD | 2017 |
|
RU2676021C1 |
Authors
Dates
2025-06-02—Published
2024-10-28—Filed