{"type":"ScholarlyArticle","title":"DDoS Event Forecasting using Twitter Data","authors":[{"name":"Zhongqing Wang","slug":"zhongqing-wang","given":"Zhongqing","family":"Wang","affiliation":"† Soochow University , Suzhou , China"},{"name":"Yue Zhang","slug":"yue-zhang","given":"Yue","family":"Zhang","affiliation":"‡ Singapore University of Technology and Design , Singapore"}],"abstract":"Distributed Denial of Service (DDoS) attacks have been significant threats to the Internet. Traditional research in cyber security focuses on detecting emerging DDoS attacks by tracing network package flow. A characteristic of DDoS defense is that rescue time is limited since the launch of attack. More resilient detection and defence models are typically more costly. We aim at predicting the likelihood of DDoS attacks by monitoring relevant text streams in social media, so that the level of defense can be adjusted dynamically for maximizing cost-effect. To our knowledge, this is a novel and challenge research question for DDoS rescue. Because the input of this task is a text stream rather than a document, information should be collected both on the textual content of individual posts. We propose a fine-grained hierarchical stream model to capture semantic information over infinitely long history, and reveal burstiness and trends. Empirical evaluation shows that social text streams are indeed informative for DDoS forecasting, and our proposed hierarchical model is more effective compared to strong baseline text stream models and discrete bag-of-words models.","doi":"10.24963/ijcai.2017/580","url":"https://ijcai.org/proceedings/2017/580","pdf":"https://ijcai.org/proceedings/2017/0580.pdf","markdown":"https://ijcai.org/proceedings/2017/580.md","bibtex":"https://ijcai.org/proceedings/2017/bibtex/580","volume":{"slug":"2017","title":"Proceedings of the Twenty-Sixth International Joint Conference on Artificial Intelligence","short_title":"IJCAI 2017","url":"https://ijcai.org/proceedings/2017/","year":2017,"location":"Melbourne, Australia","dates":"19-25 August 2017","editors":"Carles Sierra","isbn":"978-0-9992411-0-3","publisher":"International Joint Conferences on Artificial Intelligence Organization","doi_prefix":"10.24963/ijcai.2017"},"section":"Natural Language Processing","track":"Main track","number":580,"pages":{"first":4151,"last":4157},"keywords":["Natural Language Processing: NLP Applications and Tools","Natural Language Processing: Natural Language Processing"],"videos":[],"references":[{"position":1,"raw":"[Bleakley and Vert, 2011] K. Bleakley and J.-P. Vert. The group fused Lasso for multiple change-point detection. ArXiv e-prints, June 2011.","title":"The group fused Lasso for multiple change-point detection","authors":"K Bleakley, J.-P Vert","year":"2011","venue":null,"doi":null,"url":null,"internal_url":null},{"position":2,"raw":"[Carl et al., 2006] Glenn Carl, George Kesidis, Richard R. Brooks, and Suresh Rai. Denial-of-service attack- detection techniques. IEEE Internet Computing, 10(1):82- 89, January 2006.","title":"Denial-of-service attackdetection techniques","authors":"Glenn Carl, George Kesidis, Richard R Brooks, Suresh Rai","year":"2006","venue":"IEEE Internet Computing","doi":null,"url":null,"internal_url":null},{"position":3,"raw":"[Chang et al., 2016] Ching-Yun Chang, Zhiyang Teng, and Yue Zhang. Expectation-regulated neural model for event mention extraction. In Proceedings NAACL, 2016.","title":"Expectation-regulated neural model for event mention extraction","authors":"Ching-Yun Chang, Zhiyang Teng, Yue Zhang","year":"2016","venue":"Proceedings NAACL","doi":null,"url":null,"internal_url":null},{"position":4,"raw":"[Chawla et al., 2002] Nitesh V. Chawla, Kevin W. Bowyer, Lawrence O. Hall, and W. Philip Kegelmeyer. SMOTE: synthetic minority over-sampling technique. J. Artif. Intell. Res. (JAIR), 16:321-357, 2002.","title":"SMOTE: synthetic minority over-sampling technique","authors":"V Nitesh, Kevin W Chawla, Lawrence O Bowyer, W Philip Hall, Kegelmeyer","year":"2002","venue":"J. Artif. Intell. Res. (JAIR)","doi":null,"url":null,"internal_url":null},{"position":5,"raw":"[Collobert et al., 2011] Ronan Collobert, Jason Weston, Léon Bottou, Michael Karlen, Koray Kavukcuoglu, and Pavel P. Kuksa. Natural language processing (almost) from scratch. Journal of Machine Learning Research, 12:2493- 2537, 2011.","title":"Natural language processing (almost) from scratch","authors":"Ronan Collobert, Jason Weston, Léon Bottou, Michael Karlen, Koray Kavukcuoglu, Pavel P Kuksa","year":"2011","venue":"Journal of Machine Learning Research","doi":null,"url":null,"internal_url":null},{"position":6,"raw":"[Davis and Goadrich, 2006] Jesse Davis and Mark Goadrich. The relationship between precision-recall and roc curves. In Proceedings of ICML, ICML '06, New York, NY, USA, 2006. ACM.","title":"The relationship between precision-recall and roc curves","authors":"Goadrich Davis, Jesse Davis, Mark Goadrich","year":"2006","venue":"Proceedings of ICML, ICML '06","doi":null,"url":null,"internal_url":null},{"position":7,"raw":"[Ding et al., 2015] Xiao Ding, Yue Zhang, Ting Liu, and Junwen Duan. Deep learning for event-driven stock pre- diction. In Proceedings of IJCAI, pages 2327-2333, 2015.","title":"Deep learning for event-driven stock prediction","authors":"Xiao Ding, Yue Zhang, Ting Liu, Junwen Duan","year":"2015","venue":"Proceedings of IJCAI","doi":null,"url":null,"internal_url":"/proceedings/2015/329"},{"position":8,"raw":"[Duchi et al., 2011] John C. Duchi, Elad Hazan, and Yoram Singer. Adaptive subgradient methods for online learning and stochastic optimization. Journal of Machine Learning Research, 12:2121-2159, 2011.","title":"Adaptive subgradient methods for online learning and stochastic optimization","authors":"John C Duchi, Elad Hazan, Yoram Singer","year":"2011","venue":"Journal of Machine Learning Research","doi":null,"url":null,"internal_url":null},{"position":9,"raw":"[Hinton et al., 2012] Geoffrey E. Hinton, Nitish Srivastava, Alex Krizhevsky, Ilya Sutskever, and Ruslan Salakhut- dinov. Improving neural networks by preventing co- adaptation of feature detectors. CoRR, abs/1207.0580, 2012.","title":"Improving neural networks by preventing coadaptation of feature detectors","authors":"Geoffrey E Hinton, Nitish Srivastava, Alex Krizhevsky, Ilya Sutskever, Ruslan Salakhutdinov","year":"2012","venue":null,"doi":null,"url":null,"internal_url":null},{"position":10,"raw":"[Hochreiter and Schmidhuber, 1997] Sepp Hochreiter and Jürgen Schmidhuber. Long short-term memory. Neural Computation, 9(8):1735-1780, 1997.","title":"Long short-term memory","authors":"Schmidhuber Hochreiter, Sepp Hochreiter, Jürgen Schmidhuber","year":"1997","venue":"Neural Computation","doi":null,"url":null,"internal_url":null},{"position":11,"raw":"[Johnson and Zhang, 2015] Rie Johnson and Tong Zhang. Semi-supervised convolutional neural networks for tex- t categorization via region embedding. In Proceedings of NIPS, pages 919-927, 2015.","title":"Semi-supervised convolutional neural networks for text categorization via region embedding","authors":"Rie Johnson, Tong Zhang","year":"2015","venue":"Proceedings of NIPS","doi":null,"url":null,"internal_url":null},{"position":12,"raw":"[Kim, 2014] Yoon Kim. Convolutional neural networks for sentence classification. In Proceedings of EMNLP, pages 1746-1751, 2014.","title":"Convolutional neural networks for sentence classification","authors":"Yoon Kim","year":"2014","venue":"Proceedings of EMNLP","doi":null,"url":null,"internal_url":null},{"position":13,"raw":"[Li et al., 2011] Shoushan Li, Guodong Zhou, Zhongqing Wang, Sophia Yat Mei Lee, and Rangyang Wang. Imbal- anced sentiment classification. In Proceedings of CIKM, pages 2469-2472, 2011.","title":"Imbalanced sentiment classification","authors":"Shoushan Li, Guodong Zhou, Zhongqing Wang, Sophia Yat, Mei Lee, Rangyang Wang","year":"2011","venue":"Proceedings of CIKM","doi":null,"url":null,"internal_url":null},{"position":14,"raw":"[Matthews, 2014] Tim Matthews. Incapsula survey : What ddos attacks really cost businesses.","title":"Incapsula survey : What ddos attacks really cost businesses","authors":"Tim Matthews","year":null,"venue":null,"doi":null,"url":null,"internal_url":null},{"position":15,"raw":"[Mikolov et al., 2013] Tomas Mikolov, Ilya Sutskever, Kai Chen, Gregory S. Corrado, and Jeffrey Dean. Distribut- ed representations of words and phrases and their com- positionality. In Proceedings of NIPS, pages 3111-3119, 2013.","title":"Distributed representations of words and phrases and their compositionality","authors":"Mikolov","year":"2013","venue":"Proceedings of NIPS","doi":null,"url":null,"internal_url":null},{"position":16,"raw":"[Mirkovic and Reiher, 2004] Jelena Mirkovic and Peter Rei- her. A taxonomy of ddos attack and ddos defense mecha- nisms. SIGCOMM Comput. Commun. Rev., 34(2):39-53, April 2004.","title":"A taxonomy of ddos attack and ddos defense mechanisms","authors":"Reiher Mirkovic, Jelena Mirkovic, Peter Reiher","year":"2004","venue":"SIGCOMM Comput. Commun. Rev","doi":null,"url":null,"internal_url":null},{"position":17,"raw":"[Ritter et al., 2015] Alan Ritter, Evan Wright, William Casey, and Tom M. Mitchell. Weakly supervised extrac- tion of computer security events from twitter. In Proceed- ings of WWW, pages 896-905, 2015.","title":"Weakly supervised extraction of computer security events from twitter","authors":"Ritter","year":"2015","venue":"Proceedings of WWW","doi":null,"url":null,"internal_url":null},{"position":18,"raw":"[Sun et al., 2007] Yanmin Sun, Mohamed S. Kamel, Andrew K. C. Wong, and Yang Wang. Cost-sensitive boosting for classification of imbalanced data. Pattern Recognition, 40(12):3358-3378, 2007.","title":"Cost-sensitive boosting for classification of imbalanced data","authors":"Yanmin Sun, Mohamed S Kamel, K C Andrew, Yang Wong, Wang","year":"2007","venue":"Pattern Recognition","doi":null,"url":null,"internal_url":null},{"position":19,"raw":"[Tang et al., 2014] Duyu Tang, Furu Wei, Nan Yang, Ming Zhou, Ting Liu, and Bing Qin. Learning sentiment- specific word embedding for twitter sentiment classifica- tion. In Proceedings of ACL, pages 1555-1565, 2014.","title":"Learning sentimentspecific word embedding for twitter sentiment classification","authors":"Tang","year":"2014","venue":"Proceedings of ACL","doi":null,"url":null,"internal_url":null},{"position":20,"raw":"[Vo and Zhang, 2015] Duy-Tin Vo and Yue Zhang. Target- dependent twitter sentiment classification with rich auto- matic features. In Proceedings of IJCAI, pages 1347- 1353, 2015.","title":"Targetdependent twitter sentiment classification with rich automatic features","authors":"Duy-Tin Vo, Yue Zhang","year":"2015","venue":"Proceedings of IJCAI","doi":null,"url":null,"internal_url":null},{"position":21,"raw":"[Zargar et al., 2013] Saman Taghavi Zargar, James Joshi, and David Tipper. A survey of defense mechanisms a- gainst distributed denial of service (ddos) flooding at- tacks. IEEE Communications Surveys and Tutorials, 15(4):2046-2069, 2013.","title":"A survey of defense mechanisms against distributed denial of service (ddos) flooding attacks","authors":"Saman Taghavi Zargar, James Joshi, David Tipper","year":"2013","venue":"IEEE Communications Surveys and Tutorials","doi":null,"url":null,"internal_url":null}],"license_note":"Copyright International Joint Conferences on Artificial Intelligence."}