{"id":"https://openalex.org/W7202016617","doi":null,"title":"Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probability ratio test","display_name":"Detection of different types of distributed denial of service attacks using multiple features of entropy and sequential probability ratio test","publication_year":2024,"publication_date":"2024-06-01","ids":{"openalex":"https://openalex.org/W7202016617"},"language":"en","primary_location":{"id":"pmh:oai:psasir.upm.edu.my:125788","doi":null,"is_oa":true,"landing_page_url":"http://psasir.upm.edu.my/id/eprint/125788/2/FK%202024%2012%20-%20Declaration%20Form.pdf","pdf_url":"http://psasir.upm.edu.my/id/eprint/125788/3/FK%202024%2012%20-%20Full%20Text.pdf","source":{"id":"https://openalex.org/S4377196260","display_name":"Universiti Putra Malaysia Institutional Repository (Universiti Putra Malaysia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I130343225","host_organization_name":"Universiti Putra Malaysia","host_organization_lineage":["https://openalex.org/I130343225"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://psasir.upm.edu.my/id/eprint/125788/3/FK%202024%2012%20-%20Full%20Text.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032384450","display_name":"Basheer Husham Ali Al-Mafrachi","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Al Mafrachi, Basheer Husham Ali","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5032384450"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-attacks","display_name":"DDoS attacks","score":0.949999988079071},{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":0.9010000228881836},{"id":"https://openalex.org/keywords/entropy-based-detection","display_name":"entropy-based detection","score":0.703000009059906},{"id":"https://openalex.org/keywords/sequential-probability-ratio-test","display_name":"sequential probability ratio test","score":0.9940000176429749},{"id":"https://openalex.org/keywords/feature-selection","display_name":"feature selection","score":0.6930000185966492},{"id":"https://openalex.org/keywords/cicflowmeter","display_name":"CICFlowMeter","score":0.7850000262260437},{"id":"https://openalex.org/keywords/network-traffic-analysis","display_name":"network traffic analysis","score":0.5289999842643738},{"id":"https://openalex.org/keywords/attack-classification","display_name":"attack classification","score":0.421999990940094},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"false positive rate","score":0.5509999990463257},{"id":"https://openalex.org/keywords/cicddos2019","display_name":"CICDDoS2019","score":0.7379999756813049},{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.3930000066757202},{"id":"https://openalex.org/keywords/time-complexity-reduction","display_name":"time complexity reduction","score":0.5109999775886536},{"id":"https://openalex.org/keywords/dns-attacks","display_name":"DNS attacks","score":0.8059999942779541}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7904000282287598},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7590000033378601},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.597599983215332},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5127000212669373},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4406000077724457},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4277999997138977},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.4090999960899353},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35600000619888306},{"id":"https://openalex.org/C138602881","wikidata":"https://www.wikidata.org/wiki/Q2709591","display_name":"Confusion matrix","level":2,"score":0.3142000138759613},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.30239999294281006},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2937999963760376},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C2781140086","wikidata":"https://www.wikidata.org/wiki/Q557945","display_name":"Confusion","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C191178318","wikidata":"https://www.wikidata.org/wiki/Q2256906","display_name":"Thresholding","level":3,"score":0.2524000108242035}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:psasir.upm.edu.my:125788","doi":null,"is_oa":true,"landing_page_url":"http://psasir.upm.edu.my/id/eprint/125788/2/FK%202024%2012%20-%20Declaration%20Form.pdf","pdf_url":"http://psasir.upm.edu.my/id/eprint/125788/3/FK%202024%2012%20-%20Full%20Text.pdf","source":{"id":"https://openalex.org/S4377196260","display_name":"Universiti Putra Malaysia Institutional Repository (Universiti Putra Malaysia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I130343225","host_organization_name":"Universiti Putra Malaysia","host_organization_lineage":["https://openalex.org/I130343225"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"}],"best_oa_location":{"id":"pmh:oai:psasir.upm.edu.my:125788","doi":null,"is_oa":true,"landing_page_url":"http://psasir.upm.edu.my/id/eprint/125788/2/FK%202024%2012%20-%20Declaration%20Form.pdf","pdf_url":"http://psasir.upm.edu.my/id/eprint/125788/3/FK%202024%2012%20-%20Full%20Text.pdf","source":{"id":"https://openalex.org/S4377196260","display_name":"Universiti Putra Malaysia Institutional Repository (Universiti Putra Malaysia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I130343225","host_organization_name":"Universiti Putra Malaysia","host_organization_lineage":["https://openalex.org/I130343225"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7202016617.pdf","grobid_xml":"https://content.openalex.org/works/W7202016617.grobid-xml"},"referenced_works_count":133,"referenced_works":["https://openalex.org/W1152223117","https://openalex.org/W1577498723","https://openalex.org/W1952056635","https://openalex.org/W1965343849","https://openalex.org/W1987452939","https://openalex.org/W1989407319","https://openalex.org/W2030122595","https://openalex.org/W2104692292","https://openalex.org/W2106035883","https://openalex.org/W2111958600","https://openalex.org/W2118487884","https://openalex.org/W2130119598","https://openalex.org/W2131871423","https://openalex.org/W2153334513","https://openalex.org/W2158698691","https://openalex.org/W2238291488","https://openalex.org/W2308983626","https://openalex.org/W2318607486","https://openalex.org/W2323737585","https://openalex.org/W2334852362","https://openalex.org/W2339674953","https://openalex.org/W2398297630","https://openalex.org/W2428710022","https://openalex.org/W2470530050","https://openalex.org/W2485966427","https://openalex.org/W2513093253","https://openalex.org/W2575772514","https://openalex.org/W2584217814","https://openalex.org/W2584271426","https://openalex.org/W2612104483","https://openalex.org/W2619799366","https://openalex.org/W2727093517","https://openalex.org/W2732560875","https://openalex.org/W2734340558","https://openalex.org/W2741125524","https://openalex.org/W2743226273","https://openalex.org/W2777201628","https://openalex.org/W2787467369","https://openalex.org/W2791078162","https://openalex.org/W2798388460","https://openalex.org/W2799843691","https://openalex.org/W2811011461","https://openalex.org/W2820178597","https://openalex.org/W2884008840","https://openalex.org/W2892142441","https://openalex.org/W2897047257","https://openalex.org/W2902413895","https://openalex.org/W2905872522","https://openalex.org/W2910197492","https://openalex.org/W2937339252","https://openalex.org/W2959627510","https://openalex.org/W2963786947","https://openalex.org/W2982682021","https://openalex.org/W2999400832","https://openalex.org/W2999585430","https://openalex.org/W3003727567","https://openalex.org/W3004079980","https://openalex.org/W3004721559","https://openalex.org/W3005218645","https://openalex.org/W3007916142","https://openalex.org/W3021521604","https://openalex.org/W3021713389","https://openalex.org/W3022413490","https://openalex.org/W3022650403","https://openalex.org/W3030499398","https://openalex.org/W3035869188","https://openalex.org/W3043476533","https://openalex.org/W3084971599","https://openalex.org/W3088919849","https://openalex.org/W3092855438","https://openalex.org/W3093242351","https://openalex.org/W3109679951","https://openalex.org/W3119772218","https://openalex.org/W3121341762","https://openalex.org/W3126533924","https://openalex.org/W3129339224","https://openalex.org/W3136488577","https://openalex.org/W3138080548","https://openalex.org/W3155944704","https://openalex.org/W3160220648","https://openalex.org/W3165853173","https://openalex.org/W3171802458","https://openalex.org/W3175570601","https://openalex.org/W3178453898","https://openalex.org/W3180062783","https://openalex.org/W3181610599","https://openalex.org/W3186003301","https://openalex.org/W3186172578","https://openalex.org/W3195053372","https://openalex.org/W3196235507","https://openalex.org/W3197213531","https://openalex.org/W3202454876","https://openalex.org/W3203394698","https://openalex.org/W3204100060","https://openalex.org/W3204823025","https://openalex.org/W3211742690","https://openalex.org/W3211772915","https://openalex.org/W3215952099","https://openalex.org/W3216260728","https://openalex.org/W4206147127","https://openalex.org/W4206814597","https://openalex.org/W4213026819","https://openalex.org/W4213101073","https://openalex.org/W4214845355","https://openalex.org/W4221097855","https://openalex.org/W4223568751","https://openalex.org/W4225302718","https://openalex.org/W4226011810","https://openalex.org/W4226367973","https://openalex.org/W4229034842","https://openalex.org/W4233261744","https://openalex.org/W4280570265","https://openalex.org/W4281487958","https://openalex.org/W4281606717","https://openalex.org/W4281657813","https://openalex.org/W4281670944","https://openalex.org/W4281856004","https://openalex.org/W4282553259","https://openalex.org/W4283019128","https://openalex.org/W4283724983","https://openalex.org/W4284974780","https://openalex.org/W4285180265","https://openalex.org/W4285234540","https://openalex.org/W4286655861","https://openalex.org/W4288099697","https://openalex.org/W4289530011","https://openalex.org/W4293093536","https://openalex.org/W4299679592","https://openalex.org/W4299812028","https://openalex.org/W4308037227","https://openalex.org/W4360997383","https://openalex.org/W6887934511","https://openalex.org/W6948809892"],"related_works":["https://openalex.org/W7037107930","https://openalex.org/W3204823025","https://openalex.org/W4413885266","https://openalex.org/W4410115346","https://openalex.org/W2391848773","https://openalex.org/W4414881855","https://openalex.org/W4226479817","https://openalex.org/W2891539013","https://openalex.org/W4360997383","https://openalex.org/W2278053035"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,12,16,33,79,91,102,127,134,159,166,169,227,242,295,311],"Service":[3],"(DDoS)":[4],"attacks":[5,17,46,94,244,297],"are":[6,139],"among":[7],"the":[8,164,178,198,278,332,339,352,355],"most":[9],"dangerous":[10],"types":[11],"attacks.":[13],"These":[14],"kinds":[15,90,241],"bring":[18],"targeted":[19],"servers":[20],"down":[21],"and":[22,51,87,104,124,146,162,187,253,267,286,291,319,328,334,360],"make":[23],"their":[24],"services":[25],"unavailable":[26],"to":[27,58,72,83,114,118,156,196,237,306],"legal":[28],"users.":[29],"The":[30,76,111,153,225,255,308],"main":[31],"problem":[32],"current":[34],"entropy-based":[35],"detection":[36,128,173,257,280],"techniques":[37,42,137],"is":[38,82,113,155],"how":[39],"can":[40,55],"these":[41,296],"identify":[43,84],"up-to-date":[44,92],"DDoS":[45,93,243],"accurately":[47],"using":[48,65,95,203,222,269,338,351],"dynamic":[49,96],"threshold":[50,97],"effective":[52,66],"features":[53,69,101,117,209,232,272],"that":[54],"be":[56],"selected":[57],"decrease":[59],"time":[60,120,217],"complexity":[61,121],"or":[62,68,122,235],"cost":[63,123,218],"by":[64,98,129],"flows":[67],"generation":[70],"tool":[71,171],"improve":[73,125],"confusion":[74],"metrics.":[75],"first":[77],"objective":[78],"this":[80],"study":[81],"infected":[85],"ethernet":[86],"detect":[88],"various":[89,363],"implementing":[99,130],"multiple":[100],"entropy":[103],"Sequential":[105],"Probabilities":[106],"Ratio":[107],"Test":[108],"approach":[109,174,206,313],"(E-SPRT).":[110],"second":[112],"select":[115],"relevant":[116],"reduce":[119],"performance":[126],"a":[131,216],"new":[132],"combination":[133],"machine":[135],"learning":[136],"which":[138],"ANOVA,":[140],"Extra":[141],"Trees":[142],"Classifier,":[143],"Random":[144],"Forest,":[145],"Correlation":[147,151],"Matrix":[148],"with":[149,207,215,229],"Pearson":[150],"approaches.":[152],"third":[154],"analyse":[157],"problems":[158],"original":[160,353],"CICFlowMeter":[161,170],"validate":[163],"effectiveness":[165],"revised":[167,340],"version":[168,341],"on":[172,221],"as":[175,246],"well.":[176],"Furthermore,":[177],"Defense":[179],"Advanced":[180],"Research":[181],"Projects":[182],"Agency":[183],"(DARPA)":[184],"1998,":[185],"DARPA2000,":[186],"Canadian":[188],"Institute":[189],"for":[190,239,259,282,336,362],"Cybersecurity":[191],"(CIC-DDoS2019)":[192],"databases":[193],"were":[194,273,288,314,324],"utilizing":[195],"evaluate":[197],"implementation.":[199],"In":[200],"addition,":[201],"ESPRT":[202,228,312,337],"feature":[204,322],"selection":[205],"five":[208],"achieved":[210],"an":[211,299],"accuracy":[212,226,333,356],"over":[213],"97%":[214],"0.189ms":[219],"based":[220],"CICDDoS2019":[223],"dataset.":[224],"best":[230,270],"single":[231,271],"also":[233],"exceeded":[234,342],"equalled":[236],"99%":[238,343],"different":[240],"such":[245],"NTP,":[247,261],"DNS,":[248,262],"LDAP,":[249,263],"MSSQL,":[250,264],"NETBIOS,":[251,265],"SSDP,":[252,266],"UDP.":[254],"average":[256,279,300],"rates":[258,281],"identifying":[260,283],"UDP":[268],"consistently":[274],"above":[275],"99%.":[276],"However,":[277,349],"UDP-lag,":[284],"SYN,":[285],"TFTP":[287],"97%,":[289],"89%,":[290],"98%,":[292],"respectively.":[293,330],"Most":[294],"exhibited":[298],"False":[301],"Positive":[302],"Rate":[303],"(FPR)":[304],"close":[305],"0.":[307],"execution":[309],"times":[310],"approximately":[315],"189ms,":[316],"625ms,":[317],"831ms,":[318],"1,276ms":[320],"when":[321,344,350],"sets":[323],"5,":[325],"10,":[326],"15,":[327],"20,":[329],"Finally,":[331],"f-score":[335],"DARPA":[345],"1998":[346],"dataset":[347],"used.":[348],"version,":[354],"ranged":[357],"between":[358],"33%":[359],"38%":[361],"features.":[364]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-09T00:00:00"}