Skip to main content

Table 1 5-feature tuple

From: A cooperative DDoS attack detection scheme based on entropy and ensemble learning in SDN

Name of feature

Notation

Average number of packets

\(avg\_pkt\_num= \frac{{sum\_pkt\_num}}{{sum\_flows}}\)

Average number of bits

\(avg\_pkt\_bit= \frac{{sum\_pkt\_bits}}{{sum\_flows}}\)

Growth rate of port

\(rate\_port= \frac{{sum\_ports}}{{T}}\)

Growth rate of flow

\(rate\_flow= \frac{{sum\_flows}}{{T}}\)

Growth rate of source IP

\(rate\_sip = \frac{{sum\_sip}}{{T}}\)