Skip to main content

Table 1 Aggregated slow attack feature set

From: An approach to application-layer DoS detection

Feature name

Description

Protocol

Protocol

Packets

Number of packets

Bytes

Number of bytes

Flags

TCP flags

InitialFlags

Initial TCP flags

SessionFlags

Session TCP flags

Durmsec

Duration in milliseconds

PayloadInBytes

Payload in bytes

PayloadRate

Payload/second

PacketsPerSecond

Packets/second

BytesPerSecond

Bytes/second

BytesPerPacket

Bytes per packet

Classifiers

(Attack/normal)