Early Detection of LDDoS Attacks in IOT Utilizing Locality Sensitive Incremental TSVM Method

The Mirai botnet and its variants has made Internet of Things (IOT) devices a powerful amplifying platform for Low Rate Distributed Denial-of-Service (LDDoS) attacks. In this paper, we investigate and develop a novel semi-supervised Locality Sensitive Incremental Transductive Support Vector Machine (LS-ITSVM) method. The proposed method maximizes the margins of different network flows by incorporating local frequency-domain features from the autocorrelation sequence of network flow into the regularization time-domain framework of TSVM. And it saves training and detecting time by incremental training support vectors and new added samples. The result of simulation proves the proposed method can distinguish abnormal network flows with higher detection accuracy, faster training and response time, and prevent abnormal network flow groups with less impaction.