A Model to Partly but Reliably Distinguish DDOS Flood Traffic from Aggregated One

Figure 4

Synthesized FGN series.