Adaptive EWMA Method Based on Abnormal Network Traffic for LDoS Attacks

<table class="table-group" width="800px"><tr class="fig-image" id="a"><td><img alt="496376.fig.009a" src="https://static.hindawi.com/articles/mpe/volume-2014/496376/figures/496376.fig.009a.jpg"/></td></tr><tr class="fig-caption"><td align="center"><table><tr><td><b>(a) </b>Normal network without any attacks</td></tr></table></td></tr><tr class="fig-image" id="b"><td><img alt="496376.fig.009b" src="https://static.hindawi.com/articles/mpe/volume-2014/496376/figures/496376.fig.009b.jpg"/></td></tr><tr class="fig-caption"><td align="center"><table><tr><td><b>(b) </b>Abnormal network under attacks</td></tr></table></td></tr></table>

<table><svg height="16.4375" id="M147" style="vertical-align:-3.23158pt" version="1.1" viewbox="0 0 55.349998 16.4375" width="55.349998" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,12.162)"><path d="M529 97q-70 -109 -136 -109q-41 0 -56 94q-23 144 -37 284q-38 -88 -99 -202.5t-93 -156.5q-26 -8 -76 -19l-9 21q71 78 145.5 193t124.5 232q-5 84 -15 128q-12 55 -29.5 75.5t-42.5 20.5q-21 0 -45 -13l-8 24q16 17 46 30t55 13q43 0 70 -46.5t40 -169.5
q27 -249 51 -392q7 -46 23 -46q24 0 70 60z" id="x1D706"></path></g>
<g transform="matrix(.012,-0,0,-.012,9.45,16.25)"><path d="M673 0h-245v28q47 6 58 16t1 39l-55 154h-213q-31 -87 -36 -129q-16 -47 -5 -61t68 -19v-28h-226v28q50 7 68.5 23.5t43.5 80.5l214 524l24 9l193 -536q23 -63 41.5 -79.5t68.5 -21.5v-28zM418 280l-81 255h-2q-74 -197 -101 -255h184z" id="x41"></path></g><g transform="matrix(.012,-0,0,-.012,17.672,16.25)"><path d="M517 162l29 -4q-18 -100 -35 -158h-482v28q68 5 83.5 20t15.5 77v398q0 66 -13 80t-73 19v28h446q0 -8 8 -144l-29 -4q-11 51 -32 85q-11 17 -35 23t-78 6h-76q-23 0 -28 -5t-5 -27v-228h94q67 0 83 12t25 63h29v-191h-29q-10 54 -26 65.5t-81 11.5h-95v-189
q0 -65 24 -81q19 -13 104 -13q57 0 83 7t43 27q28 33 50 94z" id="x45"></path></g><g transform="matrix(.012,-0,0,-.012,24.288,16.25)"><path d="M956 650v-28q-52 -7 -69 -22.5t-39 -77.5q-60 -175 -165 -533h-31l-175 499h-2l-163 -499h-31l-164 535q-18 60 -36 76.5t-65 21.5v28h243v-28q-53 -7 -63 -18.5t3 -49.5l122 -412h2l162 499h29l175 -500h2q87 277 113 401q12 45 0.5 59t-68.5 21v28h220z" id="x57"></path></g><g transform="matrix(.012,-0,0,-.012,35.841,16.25)"><path d="M861 0h-263v28q61 5 73 22t12 97l-4 408h-4l-244 -548h-20l-224 534h-2l-15 -285q-5 -98 -3 -166q1 -34 19.5 -45t72.5 -17v-28h-233v28q45 5 62.5 17t22.5 43q11 65 19 183l14 208q3 36 3.5 55t-2.5 37.5t-6.5 25t-16.5 13t-25.5 8t-39.5 4.5v28h164l228 -501l232 501
h170v-28q-68 -6 -81 -21.5t-11 -91.5l9 -362q2 -80 15 -97t78 -22v-28z" id="x4D"></path></g><g transform="matrix(.012,-0,0,-.012,46.443,16.25)"><path d="M673 0h-245v28q47 6 58 16t1 39l-55 154h-213q-31 -87 -36 -129q-16 -47 -5 -61t68 -19v-28h-226v28q50 7 68.5 23.5t43.5 80.5l214 524l24 9l193 -536q23 -63 41.5 -79.5t68.5 -21.5v-28zM418 280l-81 255h-2q-74 -197 -101 -255h184z" id="x41"></path></g>
</svg> and <svg height="12.4375" id="M148" style="vertical-align:-0.13794pt" version="1.1" viewbox="0 0 8.6750002 12.4375" width="8.6750002" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g transform="matrix(.017,-0,0,-.017,.062,12.162)"><path d="M480 416q0 -21 -18 -41q-9 -11 -17 -7q-20 9 -42 9q-62 0 -140 -78q23 -69 88 -192q17 -31 27 -42t20 -11q16 0 62 46l17 -20q-64 -92 -119 -92q-35 0 -70 66q-41 73 -84 187q-36 -30 -62 -61q-27 -115 -35 -172q-41 -8 -78 -20l-6 6l140 612q7 28 0.5 34t-37.5 7l-34 1
l5 26q38 4 74 13.5t57 17t25 7.5q12 0 4 -32l-104 -443h2q35 38 97 93q39 35 65.5 56t62 41.5t58.5 20.5q19 0 30.5 -10t11.5 -22z" id="x1D458"></path></g>
</svg> for the AEWMA algorithm.</table>

Mathematical Problems in Engineering

fig9

Figure 9

Figure 9: Adaptive EWMA Method Based on Abnormal Network Traffic for LDoS Attacks 