A review of detection challenge for signature and anomaly-based detection in detecting HTTP DDoS attacks

Jaafar, Abdul Ghafar and Suhaimi, Nur Hanis Sabrina and Aminu Ghali, Abdulrahman and Mansor, Hafizah and Narayana Samy, Ganthan and Kama, Nazri and Hassan, Noor Hafizah (2025) A review of detection challenge for signature and anomaly-based detection in detecting HTTP DDoS attacks. Open International Journal of Informatics, 13 (2). pp. 1-18. E-ISSN 2289-2370

PDF - Published Version Restricted to Repository staff only Download (885kB) | Request a copy

Abstract

Distributed Denial of Service (DDoS) attacks have become one of the most serious concerns in the cybersecurity domain due to their ability to mimic legitimate traffic. The attack is significantly challenging to detect when occurring at the application layer because it exploits genuine request patterns, forged headers, automated attack tools, and public proxies to mimic legitimate traffic, making detection extremely difficult. This paper reviews signature-based and anomaly-based detection techniques utilizedby prior studies to detect HTTP DDoS attacks. The review output reveals that signature-based detection methods are effective for known attack patterns, while anomaly-based detection excels at detecting previously unseen behaviors. However, the signature-based detection struggles to recognize new attack patterns, unlike anomaly-based detection. Both of these detections also experience significant challenges in differentiating between authentic users and automated attack tools when public proxies are used. This review concludes that signature-based and anomaly-based detection techniques remain inadequate for detecting the attack. This review also suggests that future research should focus on a hybrid detection to detect request headers in real-time and the multi-version HTTP protocol to improve detection accuracy.

Item Type:	Article (Journal)
Uncontrolled Keywords:	DDoS, DoS, Signature Detection, Anomaly Detection
Subjects:	T Technology > T Technology (General)
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Information and Communication Technology > Department of Computer Science Kulliyyah of Information and Communication Technology > Department of Computer Science
Depositing User:	Hafizah Mansor
Date Deposited:	01 Jul 2026 13:21
Last Modified:	01 Jul 2026 13:21
Queue Number:	2026-06-Q3848
URI:	http://irep.iium.edu.my/id/eprint/129625

Actions (login required)

View Item