All-Packets-Based Multi-Rate DDoS Attack Detection Method in ISP Layer

Figure 5

Merge operation: (a) SUM operation and (b) MAX operation.

(a)

(b)