From: Low-rate DoS attack detection based on two-step cluster analysis and UTR analysis
T(s) | L(s) | R(Mbps) | Attack time period (s) | |
---|---|---|---|---|
Training data | 0 | 0 | 0 | 0 |
Testing data | 1 | 0.2 | 15 | 660–750 |
1 | 0.3 | 15 | 810–900 | |
2 | 0.2 | 15 | 960–1050 | |
2 | 0.3 | 15 | 1110–1200 | |
1 | 0.2 | 25 | 1260–1350 | |
1 | 0.3 | 25 | 1410–1500 | |
2 | 0.2 | 25 | 1560–1650 | |
2 | 0.3 | 25 | 1710–1800 |