From: A cooperative DDoS attack detection scheme based on entropy and ensemble learning in SDN
Name of feature | Notation |
---|---|
Average number of packets | \(avg\_pkt\_num= \frac{{sum\_pkt\_num}}{{sum\_flows}}\) |
Average number of bits | \(avg\_pkt\_bit= \frac{{sum\_pkt\_bits}}{{sum\_flows}}\) |
Growth rate of port | \(rate\_port= \frac{{sum\_ports}}{{T}}\) |
Growth rate of flow | \(rate\_flow= \frac{{sum\_flows}}{{T}}\) |
Growth rate of source IP | \(rate\_sip = \frac{{sum\_sip}}{{T}}\) |