A Robust DNS Flood Attack Detection with a Hybrid Deeper Learning Model

Abstract

In this article, an innovative hybrid deep learning model which consists of convolutional neural network architecture that improves with long short term memory cells is used to recognize domain name system flood attacks. The proposed model provides a comprehensive solution for direct detection of domain system flood attacks without label coding, normalization and feature selection in CICIDS dataset derived from real world data. The performance metrics is evaluated through a comprehensive performance comparison of selected machine learning, shallow neural network and deep learning classifiers. Although there is no normalization, label encoding and feature removal, very low false alarms and significantly high detection accuracy (99.87%) have been achieved. The deep learning architecture, including the proposed Long Short Term Memory cell, has contributed to the detection of domain name system flood attacks with a low false-positive diagnosis rate compared to machine learning and shallow neural networks.