A Traffic Cluster Entropy Based Approach to Distinguish DDoS Attacks from Flash Event Using DETER Testbed

<table>(a) Throughput of normal traffic with UDP ramp-down attack. (b) Source address and traffic cluster entropy of normal traffic with UDP ramp-down attack.</table>

International Scholarly Research Notices

fig10

Figure 10

Figure 10: A Traffic Cluster Entropy Based Approach to Distinguish DDoS Attacks from Flash Event Using DETER Testbed 