Research Article
Low-Rate DDoS Attack Detection Using Expectation of Packet Size
Table 5
The ratios of the distance and the ratios of the false-negative rate in different attack scenarios.
| | s | mins | | | Constant | Pulsing | Constant | Pulsing | Constant | Pulsing | Constant | Pulsing | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) | (%) |
| 0 | 875.60 | 10.48 | 651.83 | 93.43 | 928.64 | 10.83 | 705.61 | 93.88 | 793.20 | 22.5 | 585.18 | 89.50 | 880.23 | 12.28 | 676.47 | 0 | 1 | 812.19 | 3.13 | 647.36 | 0.02 | 861.90 | 3.83 | 694.48 | 0.04 | 744.98 | 2 | 580.64 | 0 | 814.60 | 4.74 | 672.96 | 0 | 2 | 748.79 | 1.91 | 642.89 | 0.02 | 795.16 | 2.29 | 683.35 | 0.04 | 696.76 | 2 | 576.10 | 0 | 748.97 | 2.28 | 669.45 | 0 | 3 | 685.38 | 1.22 | 638.43 | 0 | 728.42 | 1.42 | 672.21 | 0.04 | 648.53 | 2 | 571.56 | 0 | 683.34 | 1.47 | 665.94 | 0 | 4 | 621.98 | 1.22 | 633.96 | 0 | 661.68 | 1.35 | 661.08 | 0.04 | 600.31 | 1 | 567.02 | 0 | 617.71 | 1.38 | 662.43 | 0 | 5 | 558.57 | 1.22 | 629.50 | 0 | 594.94 | 1.29 | 649.95 | 0.04 | 552.09 | 1 | 562.48 | 0 | 552.08 | 1.33 | 658.92 | 0 | 6 | 495.17 | 1.22 | 625.03 | 0 | 528.20 | 1.25 | 638.81 | 0.04 | 503.86 | 0.5 | 557.94 | 0 | 486.45 | 1.27 | 655.41 | 0 | 7 | 431.77 | 1.22 | 620.56 | 0 | 461.46 | 1.25 | 627.68 | 0.04 | 455.64 | 0.5 | 553.40 | 0 | 420.82 | 1.27 | 651.91 | 0 | 8 | 368.36 | 1.22 | 616.10 | 0 | 394.72 | 1.22 | 616.55 | 0.04 | 407.42 | 0.5 | 548.86 | 0 | 355.19 | 1.23 | 648.40 | 0 | 9 | 304.96 | 0.06 | 611.63 | 0 | 327.98 | 0 | 605.41 | 0.04 | 359.19 | 0.5 | 544.32 | 0 | 289.56 | 0 | 644.89 | 0 | 10 | 241.55 | 0.06 | 607.17 | 0 | 261.24 | 0 | 594.28 | 0.04 | 310.97 | 0.5 | 539.78 | 0 | 223.93 | 0 | 641.38 | 0 |
|
|