DDoS Research: Traffic
Richard R. Brooks, İlker Özçelik · 2020
This chapter classifies the background traffic of a Distributed Denial of Service testing dataset into two categories: synthetically generated and operational network trace. Synthetically generated background traffic will be categorized further-based on the traffic model, traffic characteristics or the protocol used during the traffic generation process. General dataset properties provide information about the validity and accessibility of the dataset. A dataset can represent the network behavior and threats of its time. Telecommunications traffic modeling is used in many networking areas including testing network equipment, services and security products and network capacity planning. Network traffic can be described using flow or packet characteristics. Traffic generators, using traffic characteristics, simulate each traffic feature either by statistical distribution or replaying them from a given recorded trace. Some of the traffic generators only generate specific network applications and/or protocols for improving specific protocols or service quality.