Impact of network traffic anonymization on prediction and detection of DDoS attacks

• Grant number: 23/13294-4
• Support Opportunities: Scholarships in Brazil - Scientific Initiation
• Start date: November 01, 2023
• End date: October 31, 2024
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Agreement: MCTI/MC
• Principal Investigator: Michele Nogueira Lima
• Grantee: Caroline Campos Carvalho
• Host Institution: Instituto de Ciências Exatas (ICEx). Universidade Federal de Minas Gerais (UFMG). Ministério da Educação (Brasil). Belo Horizonte , SP, Brazil
• Associated research grant: 18/23098-0 - MENTORED: from modeling to experimentation - predicting and detecting DDoS and zero-day attacks, AP.TEM

Abstract

Effective prediction and detection of DDoS attacks directly depend on the quality of the information sources used as input for the prediction and detection mechanisms employed. Without a doubt, one of the best sources of information is the network traffic captured on the network interfaces of the protected devices. However, due to recent regulations such as the General Data Protection Regulation (LGPD) and the General Data Protection Regulation (GDPR), some traffic information needs to be anonymized, especially if the prediction and detection mechanisms are executed outside the domains. of the owner of the devices under protection, as in the case of computing cloud providers, or if the traffic is publicly shared with the scientific community with the aim of advancing the state of the art in the topic of cybersecurity. In this scientific initiation project, we intend to analyze how the anonymization of traffic affects the quality of the prediction and detection mechanisms for DDoS attacks created in the MENTORED project. (AU)