DDoS attack detection and defence mechanism based on second-order exponential smoothing: Holt's model

Abstract

Technological progress and digitisation are primarily assisted by the growth of internet. The web has now become a national asset, and all national security relies on it as well. But these emerging developments have also brought with them unparalleled network threats. Among them, a strong and more powerful attack on the internet is a distributed denial of service attack. In this work we propose a novel framework for DDoS detection. To detect anomalous variations in mean distance values the technique of second order exponential smoothing/Holt's method is used. In the proposed context, the DDoS defence module is based on the principle of the rate limitation of incoming traffic on the basis of bandwidth and demand rates from a device connected. The experimental verification of proposed method is done using the NS2 simulator and the results are evaluated with detection rate, throughput and false positive rate.