A Lightweight Approach to Detect the Low/High Rate IP Spoofed Cloud DDoS Attacks

Abstract

In cloud computing, broadly two facets of Distributed Denial-of-Service (DDoS) attack exist. The attacker uses Internet Protocol (IP) spoofing technique for launching the DDoS attack to disguise the source's identity. Consequently, its detection becomes a crucial and challenging task. The objective of the paper is to propose an adaptive and lightweight approach which can detect the low and high rate spoofed DDoS attack traffic accurately. The approach is implemented in a closed cloud environment. The experimental results showed that the approach can effectively detect internal and external low/high rate spoofed DDoS attacks with 99.3% accuracy and provides better performance.