Skip to main content
Article
Detecting Distributed Denial of Service Attacks in Neighbour Discovery Protocol Using Machine Learning Algorithm Based on Streams Representation
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
  • Abeer Abdullah Alsadhan, Liverpool John Moores University
  • Abir Hussain, Liverpool John Moores University
  • Thar Baker, Liverpool John Moores University
  • Omar Alfandi, Zayed University
Document Type
Conference Proceeding
Publication Date
1-1-2018
Abstract

© 2018, Springer International Publishing AG, part of Springer Nature. The main protocol of the Internet protocol version 6 suites is the neighbour discovery protocol, which is geared towards substitution of address resolution protocol, router discovery, and function redirection in Internet protocol version 4. Internet protocol version 6 nodes employ neighbour discovery protocol to detect linked hosts and routers in Internet protocol version 6 network without the dependence on dynamic host configuration protocol server, which has earned the neighbour discovery protocol the title of the stateless protocol. The authentication process of the neighbour discovery protocol exhibits weaknesses that make this protocol vulnerable to attacks. Denial of service attacks can be triggered by a malicious host through the introduction of spoofed addresses in neighbour discovery protocol messages. Internet version 6 protocols are not well supported by Network Intrusion Detection System as is the case with Internet Protocol version 4 protocols. Several data mining techniques have been introduced to improve the classification mechanism of Intrusion detection system. In addition, extensive researches indicated that there is no Intrusion Detection system for Internet Protocol version 6 using advanced machine-learning techniques toward distributed denial of service attacks. This paper aims to detect Distributed Denial of Service attacks of the Neighbour Discovery protocol using machine-learning techniques, due to the severity of the attacks and the importance of Neighbour Discovery protocol in Internet Protocol version 6. Decision tree algorithm and Random Forest Algorithm showed high accuracy results in comparison to the other benchmarked algorithms.

ISBN
9783319959566
Publisher
Springer Verlag
Disciplines
Keywords
  • Denial of service,
  • IPV6,
  • Machine learning
Scopus ID
85051871578
Indexed in Scopus
Yes
Open Access
No
https://doi.org/10.1007/978-3-319-95957-3_58
Citation Information
Abeer Abdullah Alsadhan, Abir Hussain, Thar Baker and Omar Alfandi. "Detecting Distributed Denial of Service Attacks in Neighbour Discovery Protocol Using Machine Learning Algorithm Based on Streams Representation" Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) Vol. 10956 LNAI (2018) p. 551 - 563 ISSN: <a href="https://v2.sherpa.ac.uk/id/publication/issn/0302-9743" target="_blank">0302-9743</a>
Available at: http://works.bepress.com/omar-alfandi/63/