A Model to Partly but Reliably Distinguish DDOS Flood Traffic from Aggregated One

Figure 1

Illustration of DDOS flood attacks.