Hybrid Model for DDoS Detection in Cloud Environment

The Cloud computing is scalable and on-demand service to users; its open and distributed structure makes it a prime target for Distributed Denial of Service (DDoS) attacks. These attacks affect the availability of cloud services and pose serious security risks. A hybrid DDoS detection model based on XGBoost algorithm and Chi-Square feature selection technique is presented. The Chi-Square method is used to statistically select important network traffic features. the data dimension and increasing the interpretability of the model. Normal and malicious traffic is then classified using the XGBoost classifier. The model analysis is based on the standard datasets including NSL-KDD and CICIDS2017. the fundamental key performance metrics such as accuracy, recall, precision, F1-score, and ROC-AUC. Its fast processing and low-key alarm rate, the model for real-time attack detection in cloud environments.

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-11-15
DOI
https://doi.org/10.5281/zenodo.17617568
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Hybrid Model for DDoS Detection in Cloud Environment

Zenodo (CERN European Organization for Nuclear Research)
Network Security and Intrusion Detection
article

Hybrid Model for DDoS Detection in Cloud Environment

article en

Abstract

The Cloud computing is scalable and on-demand service to users; its open and distributed structure makes it a prime target for Distributed Denial of Service (DDoS) attacks. These attacks affect the availability of cloud services and pose serious security risks. A hybrid DDoS detection model based on XGBoost algorithm and Chi-Square feature selection technique is presented. The Chi-Square method is used to statistically select important network traffic features. the data dimension and increasing the interpretability of the model. Normal and malicious traffic is then classified using the XGBoost classifier. The model analysis is based on the standard datasets including NSL-KDD and CICIDS2017. the fundamental key performance metrics such as accuracy, recall, precision, F1-score, and ROC-AUC. Its fast processing and low-key alarm rate, the model for real-time attack detection in cloud environments.

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 40%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.