A Traffic Cluster Entropy Based Approach to Distinguish DDoS Attacks from Flash Event Using DETER Testbed

Figure 9

(a) Throughput of normal traffic with UDP ramp-up attack. (b) Source address and traffic cluster entropy of normal traffic with UDP ramp-up attack.

(a)

(b)