A novel approach based on ant colony system for IP traceback

DOI

10.2991/aiea-16.2016.64How to use a DOI?

Keywords

DDoS; IP traceback; Ant colony optimization (ACO); Louvain algorithm.

Abstract

Ant colony algorithm is often used to solve the IP traceback problem without the entire network routing information. However, such algorithm is easy to converge to a local suboptimal solution. Especially with the increase of network topology size, the real attacker is more difficult to find. In this paper, a novel approach based on colony system is proposed to identify the source of the DDoS attack. This approach brings in a new concept of the network topology division before tracing the attack by the ant colony algorithm. The division based on flow information can enhance the ability of the ants to search a more globally optimal solution for the attack path, even if the network topology is large-scale. The performance of the novel approach in reconstruction the attack path is evaluated through a series of ns2 simulations. The simulations results show that the proposed scheme has better performance than the conventional ACS algorithm, e.g. the performance of the novel ACO approach has been about 10% higher than the improvement ACO scheme, when the network topology is p=800.

Copyright

© 2016, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Menglin Liu
AU  - Zhengping Jin
PY  - 2016/11
DA  - 2016/11
TI  - A novel approach based on ant colony system for IP traceback
BT  - Proceedings of the 2016 International Conference on Artificial Intelligence and Engineering Applications
PB  - Atlantis Press
SP  - 358
EP  - 363
SN  - 2352-538X
UR  - https://doi.org/10.2991/aiea-16.2016.64
DO  - 10.2991/aiea-16.2016.64
ID  - Liu2016/11
ER  -