Application of Sequential Detection in DDoS Detection
Xiaoming Qin, Zhao Jian-gong, Jianguo Jiang · Jisuanji gongcheng · 2009
According to the features of net data current rule and the changing compared with ordinary circumstances when DDoS attacks,this paper proposes that the changing function of statistical rule can be gained by CUSUM method of sequential detection to inspect the relavant changing point.It proves that the CUSUM method without parameter is a simple and effective intrusion detection system of little calculation needing no complex parameter.By this method,DDoS attack can be analyzed immediately and detection function can be improved.