A New Way of Identifying DOS Attack Using Multivariate Correlation Analysis

This paper talked about the results of MCA on the Distributed DoS detection and suggests an example, a covariance analysis model for detecting SYN flooding attacks. The imitation end results show that this method is highly accurate in detecting malicious system traffic in Distributed DoS attacks of different forces. This technique can effectively distinguish between ordinary and attack traffic. To be sure, this technique can identify even very fine attacks only a little different from normal behaviors. The linear difficulty of the method makes its immediate detection practical. The covariance model in this document to some area verifies the effectiveness of multivariate correlation analysis (MCA) for Distributed DoS detection. Some open problem still exists in this model for further research.