Research Article
Abnormal Behavior Detection to Identify Infected Systems Using the APChain Algorithm and Behavioral Profiling
Table 9
IP-spoofing DDoS botnet detection algorithm.
| Algorithm 5. IP-spoofing DDoS botnet detection |
| /T set of packets / | / C set of APChain fields / | ā | Function Behavioral_Profiling (T): | while (not stop condition) do | C Call Function APChain (T) | for T is not null do | if then | if then | | accVal1 += 1 | if then | | if then | | | if then | | return Call Function infection_host () | ā | Function infection_host () | while (not stop condition) do | if then | | return |
|
|