Anomaly Detection of Network Flooding Attacks
Mingzheng Wang · Acta Scientiarum Naturalium Universitatis Sunyatseni · 2003
A novel mechanism for detecting flooding-attacks is proposed. SYN-Flooding, as an instance of flooding-attack, is used to illustrate the theory of intensity anomaly and symmetry anomaly detections. Experiment shows that the mechanism has high detection accuracy and low detection latency.