Parametric Differences between a Real-world Distributed Denial-of-Service Attack and a Flash Event

摘要: Distributed Denial-of-Service (DDoS) attacks continue to be one of the most pernicious threats delivery services over Internet. Not only are DDoS present in many guises, they also continuously evolving as new vulnerabilities exploited. Hence accurate detection these still remains a challenging problem and necessity for ensuring high-end network security. An intrinsic challenge addressing this is effectively distinguish from similar looking Flash Events (FEs) created by legitimate clients. A considerable overlap between general characteristics FEs makes it difficult precisely separate two classes Internet activity. In paper we propose parameters which can used explicitly analyse real-world publicly available datasets validate our proposal. Our analysis shows that even though appear very attacks, there several subtle dissimilarities exploited events.