A Self-adaptive Detecting Algorithm Basedon CUSUM
Zhang Shi · Journal of Fujian Normal University · 2011
In order to detect DDoS attack in time and accurately,a detecting algorithm based-on CUSUM is proposed.Using the sensitivity of CUSUM algorithm to slight changes,the detecting algorithm take the proportion of sending packets to and outgoing packets from destination address as characteristic value.The algorithm can adjust expectations and alarm-threshold dynamically.It has good adaptability and can be applied to all kinds of network environment.The experimental results and analysis indicate that the algorithm can detect attack rapidly and accurately,also has good adaptability.