Computer Engineering and Systems Department, Faculty of Engineering, Mansoura University, Mansoura, Dakahlia, Egypt.
Head of Communications and Computer Engineering Department, MISR Higher Institute for Engineering and Technology, Mansoura, Dakahlia, Egypt.
PLoS One. 2022 Jul 29;17(7):e0271436. doi: 10.1371/journal.pone.0271436. eCollection 2022.
Throughout the past few years, the Internet of Things (IoT) has grown in popularity because of its ease of use and flexibility. Cyber criminals are interested in IoT because it offers a variety of benefits for users, but it still poses many types of threats. The most common form of attack against IoT is Distributed Denial of Service (DDoS). The growth of preventive processes against DDoS attacks has prompted IoT professionals and security experts to focus on this topic. Due to the increasing prevalence of DDoS attacks, some methods for distinguishing different types of DDoS attacks based on individual network features have become hard to implement. Additionally, monitoring traffic pattern changes and detecting DDoS attacks with accuracy are urgent and necessary. In this paper, using Modified Whale Optimization Algorithm (MWOA) feature extraction and Hybrid Long Short Term Memory (LSTM), shown that DDoS attack detection methods can be developed and tested on various datasets. The MWOA technique, which is used to optimize the weights of the LSTM neural network to reduce prediction errors in the hybrid LSTM algorithm, is used. Additionally, MWOA can optimally extract IP packet features and identify DDoS attacks with the support of MWOA-LSTM model. The proposed MWOA-LSTM framework outperforms standard support vector machines (SVM) and Genetic Algorithm (GA) as well as standard methods for detecting attacks based on precision, recall and accuracy measurements.
在过去的几年中,物联网 (IoT) 因其易用性和灵活性而越来越受欢迎。网络犯罪分子对物联网感兴趣,因为它为用户提供了多种好处,但它仍然存在多种威胁。针对物联网的最常见攻击形式是分布式拒绝服务 (DDoS)。针对 DDoS 攻击的预防过程的发展促使物联网专业人员和安全专家关注这一主题。由于 DDoS 攻击的日益普及,一些基于个别网络特征区分不同类型 DDoS 攻击的方法变得难以实施。此外,准确监测流量模式变化和检测 DDoS 攻击是紧迫和必要的。在本文中,使用改进的鲸鱼优化算法 (MWOA) 特征提取和混合长短时记忆 (LSTM),表明可以针对各种数据集开发和测试 DDoS 攻击检测方法。该方法用于优化 LSTM 神经网络的权重,以减少混合 LSTM 算法中的预测误差。此外,MWOA 可以在 MWOA-LSTM 模型的支持下优化 IP 数据包特征并识别 DDoS 攻击。所提出的 MWOA-LSTM 框架在基于精度、召回率和准确率的攻击检测标准支持向量机 (SVM) 和遗传算法 (GA) 以及标准方法方面表现出色。