International Journal of Computer Science Issues
Pulsing Denial of Service (PDoS) is a type of DoS attack. Its attacking behavior is intermittent rather than constant, which helps it avoid being detected. In this paper, an adaptive detection method is proposed for source-end detection of PDoS attacks. It has three distinctive features: its detection statistic is based on the discrepancy in the aggregated outbound and inbound packets; a self-adaptive detection threshold adapts it quickly to the variations of network traffic and the latest detection result; random abnormalities in the normal network traffic can be filtered by consecutive accumulation of threshold violations.