TY - JOUR
T1 - Deep learning techniques for DDoS attack detection
T2 - Concepts, analyses, challenges, and future directions
AU - Fu, Xingbing
AU - Lou, Supeng
AU - Zheng, Jiaming
AU - Chi, Cheng
AU - Yang, Jie
AU - Wang, Dong
AU - Zhu, Chenming
AU - Huang, Butian
AU - Zhu, Xiatian
N1 - Publisher Copyright:
© 2025 Elsevier Ltd
PY - 2025/10/1
Y1 - 2025/10/1
N2 - DDoS (Distributed Denial of Service) attacks are increasingly becoming a major threat in the field of cybersecurity. They overwhelm target servers by sending large-scale requests from multiple locations, causing the servers to become unresponsive. The distributed nature of DDoS attacks also makes detection and defense even more challenging. As the damage caused by such attacks grows, the development of efficient detection and mitigation mechanisms has become an urgent priority. While traditional machine learning methods are useful, they still require manual feature extraction, which not only involves significant human intervention, but also is time-consuming. In contrast, deep learning offers an automated approach to feature extraction and can learn more abstract patterns, which leads to improved detection performance. Therefore, this paper reviews and analyzes existing deep learning methods for DDoS attack detection. We provide a comprehensive analysis of the various types of DDoS attacks and explore different deep learning models employed for attack detection. Additionally, we explore techniques such as federated learning that can be integrated with deep learning, and analyze their related literature in DDoS attack detection. Finally, we specify future research directions on DDoS attack detection using deep learning.
AB - DDoS (Distributed Denial of Service) attacks are increasingly becoming a major threat in the field of cybersecurity. They overwhelm target servers by sending large-scale requests from multiple locations, causing the servers to become unresponsive. The distributed nature of DDoS attacks also makes detection and defense even more challenging. As the damage caused by such attacks grows, the development of efficient detection and mitigation mechanisms has become an urgent priority. While traditional machine learning methods are useful, they still require manual feature extraction, which not only involves significant human intervention, but also is time-consuming. In contrast, deep learning offers an automated approach to feature extraction and can learn more abstract patterns, which leads to improved detection performance. Therefore, this paper reviews and analyzes existing deep learning methods for DDoS attack detection. We provide a comprehensive analysis of the various types of DDoS attacks and explore different deep learning models employed for attack detection. Additionally, we explore techniques such as federated learning that can be integrated with deep learning, and analyze their related literature in DDoS attack detection. Finally, we specify future research directions on DDoS attack detection using deep learning.
KW - Attack detection
KW - Blockchain
KW - Deep learning
KW - Distributed denial of service
KW - Federated learning
KW - Transfer learning
UR - http://www.scopus.com/inward/record.url?scp=105008127519&partnerID=8YFLogxK
U2 - 10.1016/j.eswa.2025.128469
DO - 10.1016/j.eswa.2025.128469
M3 - Review article
AN - SCOPUS:105008127519
SN - 0957-4174
VL - 291
JO - Expert Systems with Applications
JF - Expert Systems with Applications
M1 - 128469
ER -