Research Article

Low-Rate DDoS Attack Detection Using Expectation of Packet Size

Table 5

The ratios of the distance and the ratios of the false-negative rate in different attack scenarios.

 s mins
ConstantPulsingConstantPulsingConstantPulsingConstantPulsing
(%) (%) (%) (%) (%) (%) (%) (%) (%) (%) (%) (%) (%) (%) (%) (%)

0 875.6010.48651.8393.43928.6410.83705.6193.88793.2022.5585.1889.50880.2312.28676.470
1 812.193.13647.360.02861.903.83694.480.04744.982580.640814.604.74672.960
2 748.791.91642.890.02795.162.29683.350.04696.762576.100748.972.28669.450
3 685.381.22638.430728.421.42672.210.04648.532571.560683.341.47665.940
4 621.981.22633.960661.681.35661.080.04600.311567.020617.711.38662.430
5 558.571.22629.500594.941.29649.950.04552.091562.480552.081.33658.920
6 495.171.22625.030528.201.25638.810.04503.860.5557.940486.451.27655.410
7 431.771.22620.560461.461.25627.680.04455.640.5553.400420.821.27651.910
8 368.361.22616.100394.721.22616.550.04407.420.5548.860355.191.23648.400
9 304.960.06611.630327.980605.410.04359.190.5544.320289.560644.890
10 241.550.06607.170261.240594.280.04310.970.5539.780223.930641.380