Multiple-Features-Based Semisupervised Clustering DDoS Detection Method

Table 2

Comparison of average time of two algorithms using different detection features.

Detection feature	Algorithm
	-means	MF-CKM
	16.1 ms	14.5 ms
	15.5 ms	15.4 ms
OWCD	14.6 ms	14.0 ms

Remarks.  : entropy of source IP; : entropy of destination IP.