Bound Maxima as a Traffic Feature under DDOS Flood Attacks

Table 3

Correlation coefficients between the pattern of Hist[MGAMA_F(n)] and that of Hist[MGAMA_C(n)] for 5 pairs of test traces.

Attack-free traffic traces	Attack-contained traffic traces	Corr_FC
OM-W1-1-1999AF	OM-W2-1-1999AC	0.01751
OM-W1-2-1999AF	OM-W2-2-1999AC	0.163261
OM-W1-3-1999AF	OM-W2-3-1999AC	0.045515
OM-W1-4-1999AF	OM-W2-4-1999AC	0.141885
OM-W1-5-1999AF	OM-W2-5-1999AC	0.177468