Table 2 Averaged performances of the methods for various error thresholds
From: Sequence-order-independent network profiling for detecting application layer DDoS attacks
| Â | Proposed | HsMM | ||
|---|---|---|---|---|
Threshold | DR(%) | FPR(%) | DR(%) | FPR(%) |
μ + σ | 95.4 | 20.9 | 89.9 | 14.7 |
μ + 1.5σ | 94.3 | 11.8 | 83.8 | 7.8 |
μ + 2σ | 91.4 | 9.1 | 74.3 | 5.4 |
μ + 2.5σ | 86.7 | 4.5 | 64.3 | 3.4 |
μ + 3σ | 83.8 | 4.0 | 38.5 | 1.7 |
μ + 3.5σ | 77.0 | 3.2 | 33.7 | 0.5 |