Detecting DDoS attacks with passive measurement based heuristics

@article{Siaterlis2004DetectingDA,
  title={Detecting DDoS attacks with passive measurement based heuristics},
  author={Christos Siaterlis and Basil S. Maglaris},
  journal={Proceedings. ISCC 2004. Ninth International Symposium on Computers And Communications (IEEE Cat. No.04TH8769)},
  year={2004},
  volume={1},
  pages={339-344 Vol.1}
}
Network traffic anomalies such as distributed denial of service attacks or the propagation of a new worm are hard to detect on noncongested ISP backbone links. The research community hasn't managed to offer reliable detection metrics that can be implemented with the current technology constraints to network administrators yet. In this work we explore and… CONTINUE READING