The LoSS Technique for Detecting New Denial of Service Attacks

We present a new technique for detecting the possible presence of certain Denial-of-Service attacks in network traffic. The effectiveness of the technique is demonstrated in experiments against 23 attacks in three different traffic backgrounds. Even though some attacks persist for only 2-4 seconds, results show detection rates up to 84%. Results also show that (for these data) the technique can be tuned to eliminate false alarms. These results are especially favorable given the technique´s objective of detecting new (previously unseen) attacks without a template of the background traffic.