ty-jour a2 - 刘，哲 - 李·何赵，小林坝 - 鹏，慧艾 - 李，刘·李，岳奥薛，景峰奥 - 梁，耀源互惠，明镇PY - 2020 DA -2020/12/30 TI - Defending Application Layer DDoS Attacks via Multidimensional Parallelotope SP - 6679304 VL - 2020 AB - The Internet is more and more integrated into people’s life; because of the complexity and fragility of the network environment, network attack presents a more and more serious trend. Application Layer DDoS (AL-DDoS) attack is the most complex form of DDoS attack, which is hindering the availability for the legitimate users by taking up a large number of requests of web server. The paper introduced the concept of behavior utility to portray the network. The concept of attack and defense utility was defined by a specific property which was the manifestation of the network risk after the offset of attack and defense. In the utility model, traffic metrics were mapped to the multidimensional parallelotope in the Euclidean space to express as a diagonal matrix. To determine the threshold status, the defense strategies of load balancing and limiting the maximum number of connections were used with different attack scales. Finally, the attack and defense utility value was calculated to evaluate the network risk level. The proposed method can master the capacity of network system against each attack means and the defense capability of network system. Its availability and accuracy are verified by comparing with the relevant works. SN - 1939-0114 UR - https://doi.org/10.1155/2020/6679304 DO - 10.1155/2020/6679304 JF - Security and Communication Networks PB - Hindawi KW - ER -