Low-Rate DDoS Attack Detection Using Expectation of Packet Size

Table 3

The comparison of the EPS and variance between the legitimate traffic and the attack traffic samples (units: bytes).

	Pulsing attack	Constant attack	Legitimate traffic
EPS	87.2663	76.4786	756.1894
Variance	3.1434	76.0008	690.4353