Modelling Web-server Flash Events

摘要: A Flash Event (FE) represents a period of time when web-server experiences dramatic increase in incoming traffic, either following newsworthy event that has prompted users to locate and access it, or as result redirection from other popular web social media sites. This usually leads network congestion Quality-of-Service (QoS) degradation. These events can be mistaken for Distributed Denial-of-Service (DDoS) attacks aimed at disrupting the server. Accurate detection FEs their distinction DDoS is important, since different actions need undertaken by administrators these two cases. However, lack public domain FE datasets hinders research this area. In paper we present detailed study flash classify them into three broad categories. addition, describes terms key components: volume related source IP-addresses, resources being accessed. We such model with minimal parameters use publicly available analyse validate our proposed model. The used generate types closely approximating real-world scenarios, order facilitate distinguishing attacks.