Fuzzy Request Set Modelling for Detecting Multiplexed Asymmetric DDoS Attacks on HTTP/2 servers

作者：

Highlights：

• Proposes a detection mechanism for multiplexed asymmetric attacks on HTTP/2 servers.

• Describes the concept of request sets and valid request sets.

• Models an HTTP/2 request set as a Fuzzy Multiset.

• Proposes a quantitative approach for describing the validity of a request set.

• Demonstrates the efficiency of the proposed detection mechanism.

摘要

•Proposes a detection mechanism for multiplexed asymmetric attacks on HTTP/2 servers.•Describes the concept of request sets and valid request sets.•Models an HTTP/2 request set as a Fuzzy Multiset.•Proposes a quantitative approach for describing the validity of a request set.•Demonstrates the efficiency of the proposed detection mechanism.

论文关键词：Application layer,DDoS,Asymmetric workload,Multiplexing,Server push,Http/2,Detection,Fuzzy multiset

论文评审过程：Received 24 December 2020, Revised 17 June 2021, Accepted 29 July 2021, Available online 8 August 2021, Version of Record 16 August 2021.

论文官网地址：https://doi.org/10.1016/j.eswa.2021.115697