Distributed Denial of Service attacks identification using payload signature production

With the development of new information and communication technologies and the pervasive use of cyberspace, distributed denial of service (DDoS) attacks are a serious threat to online organizations. These attacks can have destructive effects, for example, on one of its effects can be in terms of the public face of the trademark and its revenue. A good way to deal with DDoS attacks is to save a signature for each attack. Today, most organizations and institutions, both national and military (military and law enforcement) face such attacks, so in this study, while trying to identify intrusion detection systems in the proposed method to produce the necessary signatures to explain. Using this method, any attack can be detected as soon as this signature is found in traffic. However, this process is not easy and the signature production process is usually time consuming and requires a lot of effort. To help solve this challenge of generating signature problems, in this research, we propose an automated method for generating data-based signatures for DDoS attacks. This study also examines the relationships between different data packets of the same attack. In fact, data packet-based digital signatures are used for attacks whose pattern and core are the same, with only minor differences in the structure of the attack. The research concludes with a proposal for a signature generation algorithm and its validation using applied tools.