{"id":34307,"date":"2024-11-10T17:56:56","date_gmt":"2024-11-10T16:56:56","guid":{"rendered":"https:\/\/kinit.sk\/publication\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/"},"modified":"2026-04-23T15:20:09","modified_gmt":"2026-04-23T13:20:09","slug":"windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning","status":"publish","type":"publication","link":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/","title":{"rendered":"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning"},"content":{"rendered":"
\n

Goldschmidt, P., Kucera, J.1<\/sup><\/strong><\/p>\n<\/div>\n\n

\n

Distributed Denial of Service (DDoS) attacks are an ever-increasing type of security incident on modern computer networks. To tackle the issue, we propose Windower, a feature-extraction method for real-time network-based intrusion (particularly DDoS) detection. Our stream data mining module employs a sliding window principle to compute statistical information directly from network packets. Furthermore, we summarize several such windows and compute inter-window statistics to increase detection reliability. Summarized statistics are then fed into an ML-based attack discriminator. If an attack is recognized, we drop the consequent attacking source\u2019s traffic using simple ACL rules. The experimental results evaluated on several datasets indicate the ability to reliably detect an ongoing attack within the first six seconds of its start and mitigate 99% of flood and 92% of slow attacks while maintaining false positives below 1%. In contrast to state-of-the-art, our approach provides greater flexibility by achieving high detection performance and low resources as flow-based systems while offering prompt attack detection known from packet-based solutions. Windower thus brings an appealing trade-off between attack detection performance, detection delay, and computing resources suitable for real-world deployments.<\/p>\n<\/div>\n\n

\n

1<\/sup> Czech Metrology Institute CMI, Brno, Czech Republic<\/em><\/p>\n<\/div>\n\n

\n

Cite: Goldschmidt, P., Kucera, J., Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning<\/a>. NOMS 2024-2024 IEEE Network Operations and Management Symposium (2024).<\/p>\n<\/div>\n\n\n","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"categories":[81,442],"class_list":["post-34307","publication","type-publication","status-publish","hentry","category-data-analytics-for-green-energy-sk","category-2024-sk"],"acf":[],"yoast_head":"\nWindower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning - KInIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning - KInIT\" \/>\n<meta property=\"og:description\" content=\"Goldschmidt, P., Kucera, J.1 Distributed Denial of Service (DDoS) attacks are an ever-increasing type of security incident on modern computer networks. To tackle the issue, we propose Windower, a feature-extraction...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/\" \/>\n<meta property=\"og:site_name\" content=\"KInIT\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-23T13:20:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/KINIT_Sharepic.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@kinit\" \/>\n<meta name=\"twitter:label1\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 min\u00fata\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/publikacia\\\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\\\/\",\"url\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/publikacia\\\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\\\/\",\"name\":\"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning - KInIT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/#website\"},\"datePublished\":\"2024-11-10T16:56:56+00:00\",\"dateModified\":\"2026-04-23T13:20:09+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/publikacia\\\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\\\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kinit.sk\\\/sk\\\/publikacia\\\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/publikacia\\\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data Analytics for Green Energy\",\"item\":\"https:\\\/\\\/kinit.sk\\\/category\\\/data-analytics-for-green-energy\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#website\",\"url\":\"https:\\\/\\\/kinit.sk\\\/\",\"name\":\"KInIT\",\"description\":\"Vyu\u017e\u00edvame v\u00fdskum pre \u013eud\u00ed a priemysel\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kinit.sk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning - KInIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/","og_locale":"sk_SK","og_type":"article","og_title":"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning - KInIT","og_description":"Goldschmidt, P., Kucera, J.1 Distributed Denial of Service (DDoS) attacks are an ever-increasing type of security incident on modern computer networks. To tackle the issue, we propose Windower, a feature-extraction...","og_url":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/","og_site_name":"KInIT","article_modified_time":"2026-04-23T13:20:09+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/KINIT_Sharepic.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_site":"@kinit","twitter_misc":{"Predpokladan\u00fd \u010das \u010d\u00edtania":"1 min\u00fata"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/","url":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/","name":"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning - KInIT","isPartOf":{"@id":"https:\/\/kinit.sk\/#website"},"datePublished":"2024-11-10T16:56:56+00:00","dateModified":"2026-04-23T13:20:09+00:00","breadcrumb":{"@id":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/kinit.sk\/sk\/publikacia\/windower-feature-extraction-for-real-time-ddos-detection-using-machine-learning\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kinit.sk\/sk\/"},{"@type":"ListItem","position":2,"name":"Data Analytics for Green Energy","item":"https:\/\/kinit.sk\/category\/data-analytics-for-green-energy\/"},{"@type":"ListItem","position":3,"name":"Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning"}]},{"@type":"WebSite","@id":"https:\/\/kinit.sk\/#website","url":"https:\/\/kinit.sk\/","name":"KInIT","description":"Vyu\u017e\u00edvame v\u00fdskum pre \u013eud\u00ed a priemysel","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kinit.sk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"}]}},"_links":{"self":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/publication\/34307","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/publication"}],"about":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/types\/publication"}],"version-history":[{"count":1,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/publication\/34307\/revisions"}],"predecessor-version":[{"id":40894,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/publication\/34307\/revisions\/40894"}],"wp:attachment":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/media?parent=34307"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/categories?post=34307"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}