{"id":"https://openalex.org/W2906860912","doi":"https://doi.org/10.3390/sym11010078","title":"A DRDoS Detection and Defense Method Based on Deep Forest in the Big Data Environment","display_name":"A DRDoS Detection and Defense Method Based on Deep Forest in the Big Data Environment","publication_year":2019,"publication_date":"2019-01-11","ids":{"openalex":"https://openalex.org/W2906860912","doi":"https://doi.org/10.3390/sym11010078","mag":"2906860912"},"language":"en","primary_location":{"id":"doi:10.3390/sym11010078","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym11010078","pdf_url":"https://www.mdpi.com/2073-8994/11/1/78/pdf?version=1547211990","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-8994/11/1/78/pdf?version=1547211990","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066485633","display_name":"Ruomeng Xu","orcid":"https://orcid.org/0000-0001-6155-4582"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruomeng Xu","raw_affiliation_strings":["School of Information Science and Technology, Hainan University, Haikou 570228, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Hainan University, Haikou 570228, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054232978","display_name":"Jieren Cheng","orcid":"https://orcid.org/0000-0002-0160-0126"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jieren Cheng","raw_affiliation_strings":["School of Information Science and Technology, Hainan University, Haikou 570228, China","State Key Laboratory of Marine Resource Utilization in South China Sea, Haikou 570228, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Hainan University, Haikou 570228, China","institution_ids":["https://openalex.org/I20942203"]},{"raw_affiliation_string":"State Key Laboratory of Marine Resource Utilization in South China Sea, Haikou 570228, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067722954","display_name":"Fengkai Wang","orcid":"https://orcid.org/0000-0001-8385-6901"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fengkai Wang","raw_affiliation_strings":["Rossier School, University of Southern California, California, CA 90089, USA"],"raw_orcid":"https://orcid.org/0000-0001-8385-6901","affiliations":[{"raw_affiliation_string":"Rossier School, University of Southern California, California, CA 90089, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073355834","display_name":"Xiangyan Tang","orcid":"https://orcid.org/0000-0002-3874-8415"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyan Tang","raw_affiliation_strings":["School of Information Science and Technology, Hainan University, Haikou 570228, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Technology, Hainan University, Haikou 570228, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102718620","display_name":"Jinying Xu","orcid":"https://orcid.org/0000-0001-9589-6396"},"institutions":[{"id":"https://openalex.org/I4210119388","display_name":"Zhejiang Science and Technology Information Institute","ror":"https://ror.org/02rzte064","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210119388"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinying Xu","raw_affiliation_strings":["Zhejiang Science and Technology Information Institute, Hangzhou 310006, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Science and Technology Information Institute, Hangzhou 310006, China","institution_ids":["https://openalex.org/I4210119388"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5054232978"],"corresponding_institution_ids":["https://openalex.org/I20942203"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":1.6729,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.85122336,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"11","issue":"1","first_page":"78","last_page":"78"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7969496250152588},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7168092131614685},{"id":"https://openalex.org/keywords/estimator","display_name":"Estimator","score":0.6290048956871033},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6051228642463684},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.5496002435684204},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3906433582305908},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3613581657409668},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34200263023376465},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.33578506112098694},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2835405468940735},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24583923816680908},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.11302787065505981},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0954333245754242}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7969496250152588},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7168092131614685},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.6290048956871033},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6051228642463684},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.5496002435684204},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3906433582305908},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3613581657409668},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34200263023376465},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.33578506112098694},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2835405468940735},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24583923816680908},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.11302787065505981},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0954333245754242},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/sym11010078","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym11010078","pdf_url":"https://www.mdpi.com/2073-8994/11/1/78/pdf?version=1547211990","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b99d32d1b35e48cd9bbe9866fa1e22d6","is_oa":true,"landing_page_url":"https://doaj.org/article/b99d32d1b35e48cd9bbe9866fa1e22d6","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symmetry, Vol 11, Iss 1, p 78 (2019)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/2073-8994/11/1/78/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/sym11010078","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symmetry","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/sym11010078","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym11010078","pdf_url":"https://www.mdpi.com/2073-8994/11/1/78/pdf?version=1547211990","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15","score":0.7099999785423279}],"awards":[{"id":"https://openalex.org/G1977024011","display_name":null,"funder_award_id":"61762033, 61702539","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2065657826","display_name":null,"funder_award_id":"617048","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4450125656","display_name":null,"funder_award_id":"qnjj1444","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6941291261","display_name":null,"funder_award_id":"kyqd1328","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7063847093","display_name":null,"funder_award_id":"61702539","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8550726830","display_name":null,"funder_award_id":"2018CXTD333","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8806633191","display_name":"\u57fa\u4e8e\u5927\u6570\u636e\u7684DDoS\u653b\u51fb\u6001\u52bf\u611f\u77e5\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61762033","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323370","display_name":"Hainan University","ror":"https://ror.org/03q648j11"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2906860912.pdf","grobid_xml":"https://content.openalex.org/works/W2906860912.grobid-xml"},"referenced_works_count":47,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W755069602","https://openalex.org/W1964793108","https://openalex.org/W1966416874","https://openalex.org/W1967612926","https://openalex.org/W1989454965","https://openalex.org/W2022350629","https://openalex.org/W2050955150","https://openalex.org/W2086324929","https://openalex.org/W2142209629","https://openalex.org/W2142889610","https://openalex.org/W2147878151","https://openalex.org/W2157157130","https://openalex.org/W2164465368","https://openalex.org/W2168403522","https://openalex.org/W2289668161","https://openalex.org/W2402560368","https://openalex.org/W2476002244","https://openalex.org/W2533734442","https://openalex.org/W2588787044","https://openalex.org/W2733765803","https://openalex.org/W2734435115","https://openalex.org/W2752856697","https://openalex.org/W2758469676","https://openalex.org/W2767072221","https://openalex.org/W2783774416","https://openalex.org/W2789622866","https://openalex.org/W2791750046","https://openalex.org/W2791790290","https://openalex.org/W2792310543","https://openalex.org/W2793150943","https://openalex.org/W2794222060","https://openalex.org/W2794918741","https://openalex.org/W2801483300","https://openalex.org/W2808201035","https://openalex.org/W2810474476","https://openalex.org/W2890541396","https://openalex.org/W2896402450","https://openalex.org/W2900833923","https://openalex.org/W3144467696","https://openalex.org/W4244901221","https://openalex.org/W6610362903","https://openalex.org/W6680950555","https://openalex.org/W6683641707","https://openalex.org/W6684262448","https://openalex.org/W6751206314","https://openalex.org/W6999701276"],"related_works":["https://openalex.org/W2765763546","https://openalex.org/W4386482731","https://openalex.org/W4385302085","https://openalex.org/W2360429410","https://openalex.org/W4390188535","https://openalex.org/W4256682929","https://openalex.org/W335511927","https://openalex.org/W2471811227","https://openalex.org/W2217591390","https://openalex.org/W2157496457"],"abstract_inverted_index":{"Distributed":[0,13],"Denial":[1,15],"of":[2,10,16,23,25,31,39,68,116,157,245],"Service":[3,17],"(DDoS)":[4],"has":[5],"developed":[6],"multiple":[7],"variants,":[8],"one":[9],"which":[11,61,155],"is":[12,34,43],"Reflective":[14],"(DRDoS).":[18],"With":[19],"the":[20,29,37,73,110,121,134,139,152,179,184,191,207,226,236,243],"increasing":[21],"number":[22],"Internet":[24],"Things":[26],"(IoT)":[27],"devices,":[28],"threat":[30,130],"DRDoS":[32,41,58,82,105,117,129,145,214,237,247],"attack":[33,42,106,118,215,238],"growing,":[35],"and":[36,84,93,147,169,197,203,220,240],"damage":[38,244],"a":[40,81,127,144,221,246],"more":[44],"destructive":[45],"than":[46],"other":[47],"types.":[48],"The":[49],"existing":[50],"DDoS":[51],"detection":[52,83,146,185,199,218],"methods":[53],"cannot":[54],"be":[55],"generalized":[56],"in":[57,120,175,194],"early":[59],"detection,":[60],"leads":[62],"to":[63,102,189,233],"heavy":[64],"load":[65],"or":[66],"degradation":[67],"service":[69,98,181],"when":[70],"deployed":[71],"at":[72],"final":[74],"point.":[75],"In":[76],"this":[77],"paper,":[78],"we":[79,95,125,142,209],"propose":[80],"defense":[85,100,148,227],"method":[86,208],"based":[87,150],"on":[88,113,151],"deep":[89,153],"forest":[90,163,167,173],"model":[91,101,149,228],"(DDDF),":[92],"then":[94],"integrate":[96],"differentiated":[97,180],"into":[99],"filter":[103],"out":[104],"flow.":[107],"Firstly,":[108],"from":[109,133,187],"statistics":[111],"perspective":[112],"different":[114,195,198],"stages":[115,196],"flow":[119],"big":[122],"data":[123],"environment,":[124],"extract":[126],"host-based":[128],"index":[131],"(HDTI)":[132],"network":[135],"flows.":[136],"Secondly,":[137],"using":[138],"HDTI":[140],"feature":[141],"build":[143],"forest,":[154],"consists":[156],"1":[158],"extreme":[159],"gradient":[160],"boost":[161],"(XGBoost)":[162],"estimator,":[164],"2":[165,170],"random":[166,172],"estimators,":[168],"extra":[171],"estimators":[174],"each":[176],"layer.":[177],"Lastly,":[178],"procedure":[182],"applies":[183],"result":[186],"DDDF":[188],"drop":[190],"traffic":[192],"identified":[193],"points.":[200],"Theoretical":[201],"analysis":[202],"experiments":[204],"show":[205],"that":[206],"proposed":[210],"can":[211],"effectively":[212,234],"identify":[213],"with":[216],"higher":[217],"rate":[219],"lower":[222],"false":[223],"alarm":[224],"rate,":[225],"also":[229],"shows":[230],"distinguishing":[231],"ability":[232],"eliminate":[235],"flows,":[239],"dramatically":[241],"mitigate":[242],"attack.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":1}],"updated_date":"2026-06-06T09:05:17.133730","created_date":"2025-10-10T00:00:00"}