The GAIA sensor
Emmanuel Besson, Aline Gouget, Hervé Sibert · ACM SIGMETRICS Performance Evaluation Review · 2006
Distributed Denial of Service (DDoS) attacks are a major network security threat. Most recent host-based DDoS detection mechanisms are dedicated to a particular set of attacks, focusing either on the recent dynamic of the traffic, or on its long range dependence. We propose a DDoS early detection component based on anomaly detection which combines static and dynamic behavior analysis, including experimental results.