Detecting DoS and DDoS Attacks by Using an Intrusion Detection and Remote Prevention System
Fang−Yie Leu, Zhiyang Li · 2009
In this article, we proposed an intrusion prevention system, named cumulative-sum-based intrusion prevention system (CSIPS) which detects malicious behaviors, attacks and distributed attacks launched to remote clients and local hosts based on the cumulative sum (CUSUM) algorithm. Experimental results show that CSIPSs in a united defense environment can carry out a higher security level for the environment.