Skip to main content

Table 1 5-feature tuple

From: A cooperative DDoS attack detection scheme based on entropy and ensemble learning in SDN

Name of feature Notation
Average number of packets \(avg\_pkt\_num= \frac{{sum\_pkt\_num}}{{sum\_flows}}\)
Average number of bits \(avg\_pkt\_bit= \frac{{sum\_pkt\_bits}}{{sum\_flows}}\)
Growth rate of port \(rate\_port= \frac{{sum\_ports}}{{T}}\)
Growth rate of flow \(rate\_flow= \frac{{sum\_flows}}{{T}}\)
Growth rate of source IP \(rate\_sip = \frac{{sum\_sip}}{{T}}\)