Using the cumulative sum algorithm against distributed denial of service attacks in Internet of Things

Abstract

The paper presents the threats that are present in Internet of Things (IoT) systems and how they can be used to perpetuate a large scale DDoS attack. The paper investigates how the Cumulative Sum (CUSUM) algorithm can be used to detect a DDoS attack originating from an IoT system, and how the performance of the algorithm is affected by its tuning parameters and various network attack intensities. The performance of the algorithm is measured against the trade-off between the algorithm’s detection rate, false alarm and detection delay. The performance results are analysed and discussed and avenues for future work are provided.