scholarly journals Use of MARKOV Chain for Early Detecting DDoS Attacks

2021 ◽  
Vol 13 (04) ◽  
pp. 01-11
Author(s):  
Chin-Ling Chen ◽  
Jian-Ming Chen

DDoS has a variety of types of mixed attacks. Botnet attackers can chain different types of DDoS attacks to confuse cybersecurity defenders. In this article, the attack type can be represented as the state of the model. Considering the attack type, we use this model to calculate the final attack probability. The final attack probability is then converted into one prediction vector, and the incoming attacks can be detected early before IDS issues an alert. The experiment results have shown that the prediction model that can make multi-vector DDoS detection and analysis easier.

2014 ◽  
Vol 2014 ◽  
pp. 1-15 ◽  
Author(s):  
Monika Sachdeva ◽  
Krishan Kumar

The detection of distributed denial of service (DDoS) attacks is one of the hardest problems confronted by the network security researchers. Flash event (FE), which is caused by a large number of legitimate requests, has similar characteristics to those of DDoS attacks. Moreover DDoS attacks and FEs require altogether different handling procedures. So discriminating DDoS attacks from FEs is very important. But the research involving DDoS detection has not laid enough emphasis on including FEs scenarios in the experiments. In this paper, we are using traffic cluster entropy as detection metric not only to detect DDoS attacks but also to distinguish DDoS attacks from FEs. We have validated our approach on cyber-defense technology experimental research laboratory (DETER) testbed. Different emulation scenarios are created on DETER using mix of legitimate, flash, and different types of attacks at varying strengths. It is found that, when flash event is triggered, source address entropy increases but the corresponding traffic cluster entropy does not increase. However, when DDoS attack is launched, traffic cluster entropy also increases along with source address entropy. An analysis of live traces on DETER testbed clearly manifests supremacy of our approach.


2021 ◽  
Vol 58 (2) ◽  
pp. 372-393
Author(s):  
H. M. Jansen

AbstractOur aim is to find sufficient conditions for weak convergence of stochastic integrals with respect to the state occupation measure of a Markov chain. First, we study properties of the state indicator function and the state occupation measure of a Markov chain. In particular, we establish weak convergence of the state occupation measure under a scaling of the generator matrix. Then, relying on the connection between the state occupation measure and the Dynkin martingale, we provide sufficient conditions for weak convergence of stochastic integrals with respect to the state occupation measure. We apply our results to derive diffusion limits for the Markov-modulated Erlang loss model and the regime-switching Cox–Ingersoll–Ross process.


1982 ◽  
Vol 12 (2) ◽  
pp. 232-239 ◽  
Author(s):  
Chhun-Huor Ung ◽  
Jean Beaulieu ◽  
Daniel Demers

This paper describes a prediction model adopted by the Department of Energy and Resources of Quebec to (i) update temporary sample plots and (ii) project into the future the state of permanent sample plots in Quebec forests. Predicting the growth of a forest species means predicting the state of this species in time. Three basic characteristics mark the state of a species in a given year: number of trees, their total basal area, and their total volume. To date, in Quebec, normal or empirical yield tables have been used to predict the state of some species in ideal or real growth conditions, but these yield tables apply only to pure or almost pure even-aged stands. The prediction model for hardwood and softwood species presented in this paper serves the same purpose as the yield tables; however, it differs from the yield tables in that it can predict the state of each hardwood or softwood species found in pure or mixed, even- or uneven-aged stands. The prediction model was validated for 19 species found in a pilot territory located in the Basse-Gatincau (southwestern Quebec). The paper terminates with a discussion on the limitation of the prediction model and the conditions for its use.


1950 ◽  
Vol 17 (2) ◽  
pp. 145-153 ◽  
Author(s):  
J. O. Hinze ◽  
H. Milborn

Abstract Liquid, supplied through a stationary tube to the inner part of a rotating cup widening toward a brim, flows viscously in a thin layer toward this brim and is then flung off, all by centrifugal action. The flow within this layer and the disintegration phenomena occurring beyond the brim have been studied, experimentally as well as theoretically. A formula has been derived for the thickness and for the radial velocity of the liquid layer within the cup, which proved to agree reasonably well with experimental results. Three essentially different types of disintegration may take place around and beyond the edge of the cup designated, respectively, by: (a) the state of direct drop formation; (b) the state of ligament formation; and (c) the state of film formation. Which one of these is realized depends upon working conditions. Transition from state (a) into (b), or of state (b) into state (c) is promoted by an increased quantity of supply, an increased angular speed, a decreased diameter of the cup, an increased density, an increased viscosity, and a decreased surface tension of the liquid. The experimental results have been expressed in relationships between relevant dimensionless groups. For the state of ligament formation a semiempirical relationship has been derived between the number of ligaments and dimensionless groups determining the working conditions of the cup. Results of drop-size measurements made for the state of ligament formation as well as for the state of film formation show that atomization by mere rotation of the cup is much more uniform than commonly achieved with pressure atomizers.


1997 ◽  
Vol 3 (1) ◽  
pp. 57-68 ◽  
Author(s):  
Guy R. West ◽  
Ari Gamage

This study assesses the significance of different types of tourists to Victoria, Australia, by their relative contribution to the economy. Differential impacts are calculated using an input–output model incorporating marginal household coefficients. The analysis demonstrates that the conventional input–output model can overestimate the flow-on effects to value added, income and employment by a significant amount. It finds that domestic tourists are the largest contributor to the State economy, with day-trippers spending the greatest amount. International tourists rank last in terms of economic impacts on the state.


2018 ◽  
Vol 8 (3) ◽  
pp. 294-299 ◽  
Author(s):  
Laura-Marie Töpfer

The commentaries on this forum’s anchor article, ‘China’s Integration into the Global Financial System: Toward a State-led Conception of Global Financial Networks’, examine how the state is shaping global financial networks (GFNs). In response to these reviews, this article discusses three common themes that bind the different commentaries: (1) different types of agency, power, and the rise of new actors; (2) the methodology behind studying state-led GFNs; and (3) the structural question of ‘Chinese exceptionalism’ as a mode of capitalism. Overall, this article affirms that the state remains central to our understanding of competitive hierarchies and firm behavior in financial networks.


2019 ◽  
Vol 8 (1) ◽  
pp. 486-495 ◽  
Author(s):  
Bimal Kumar Mishra ◽  
Ajit Kumar Keshri ◽  
Dheeresh Kumar Mallick ◽  
Binay Kumar Mishra

Abstract Internet of Things (IoT) opens up the possibility of agglomerations of different types of devices, Internet and human elements to provide extreme interconnectivity among them towards achieving a completely connected world of things. The mainstream adaptation of IoT technology and its widespread use has also opened up a whole new platform for cyber perpetrators mostly used for distributed denial of service (DDoS) attacks. In this paper, under the influence of internal and external nodes, a two - fold epidemic model is developed where attack on IoT devices is first achieved and then IoT based distributed attack of malicious objects on targeted resources in a network has been established. This model is mainly based on Mirai botnet made of IoT devices which came into the limelight with three major DDoS attacks in 2016. The model is analyzed at equilibrium points to find the conditions for their local and global stability. Impact of external nodes on the over-all model is critically analyzed. Numerical simulations are performed to validate the vitality of the model developed.


2020 ◽  
Vol 73 (7) ◽  
pp. 1516-1520
Author(s):  
Oksana V. Tymoshchuk ◽  
Oksana Y. Zhurakivska ◽  
Volodymyr V. Derpak ◽  
Iryna O. Kostitska ◽  
Iryna T. Tokar

The aim of study is special aspects of the efficient daily routine of students at modern educational institutions of different types, and its influence on psychophysical functions, adaptive abilities, the quality of life as well as the state of mental and somatic health of the youngsters. Materials and methods: While studying special aspects of the daily routine of students at modern educational institutions and their influence on the state of physical and mental health, the young people were observed in five modern educational establishments in Ivano-Frankivsk: Vasyl Stefanyk Precarpathian National University, Ivano-Frankivsk Finance Commercial Cooperative College named after S.Granat, Ivano-Frankivsk music school named after Denis Sichinskiy, Ivano-Frankivsk Vocational Motor Transport and Construction Lyceum № 15, Ivano-Frankivsk boarding lyceum for gifted young people from rural areas. 300 students were observed (150 female students and 150 male students). The study analyzed their educational conditions, daily routine tension, and activities during breaks, special aspects of leisure arrangements, amount of time spent on homework, subjective assessment of the level of tension of the educational process, and their projected influence on the health state of students by using static models. Results: Received results of the assessment of sanitary and hygienic conditions under which training takes place at modern educational institutions of different types, as well as conditions of after school activities of the students, by applying common methods to evaluate illumination level, microclimate, and air quality have revealed that the youngsters’ conditions at modern educational institutions are marked by absence of significant deviations from common hygienic requirements, they are similar and easily comparable and that enables defensibly and illuminatively to identify main features of influence of the different psychohygienic methods on the development of health maintaining tools and the establishment of features of the formation of functional capabilities and the basic correlates of mental and physical health. Conclusions: The educational conditions of young people in modern educational establishments can be described as not having considerable deviations from common hygienic requirements, being easily comparable and enabling to identify main influence factors of different types of psychohygienic methods of developing and implementing of healthmaintaining tools on the course of formation of the functional capabilities of the body and the development of the main adaptation reactions in young males and females.


Sign in / Sign up

Export Citation Format

Share Document