Distributed Denial of Service (DDoS) attacks continue to draw significant attention, especially with the recent surge in cyber attacks that targeted the healthcare, education and financial sectors, during the COVID-19 pandemic The expansion of virtualization and softwarization technologies, and the surge in Internet of Things (IoT) devices, increase the attack surface and the impact of attacks on networks In this paper, we present a novel time-based anomaly detection system that leverages an Autoencoder We explore the impact of different time-windows on detecting multiple DDoS attacks that are difficult to detect via the widely used flow-based features We train and evaluate our Autoencoder on the recent CICDDoS2019 dataset, and show that our approach achieves an anomaly detection F1-score of over 99% for most attacks and greater than 95% for all attacks © 2020 IFIP
Time-based anomaly detection using autoencoder