Date Added: Nov 2012
Intrusion detection is the process of monitoring the events occurring in a computer system or network and analyzing them for signs of intrusions. In this paper, the authors have presented a new technique, "Backscatter analysis," for estimating denial-of-service attack activity in the Internet. Using this technique, they observed widespread DoS attacks in the Internet, which are distributed among many different domains and ISPs. The size and length of the attacks they observed were heavy-tailed, with a small number of large and long attacks, surrounded by thousands of small short attacks.