Research Article

RT-SAD: Real-Time Sketch-Based Adaptive DDoS Detection for ISP Network

Algorithm 1

DDoS attack detection algorithm.
Input: NetFlow Record, Sketch Detect_Asym, Detect_Pred, Detect_Thld
Output: DDoS attack detection results
(1)while Current window not end do
(2)Get a NetFlow record
(3)Update the by using
(4) = abs ()
(5)if  > then
(6)   Alert of DDoS
(7)else
(8)   Put the into
(9)end if
(10)end while
(11)for each in do
(12)Update
(13)Update
(14)end for