Research Article
Extracting Low-Rate DDoS Attack Characteristics: The Case of Multipath TCP-Based Communication Networks
Table 1
The occupancy rate of the MPTCP flow and the attack flow.
| Flow number | 0-5 s | 5-10 s | 10-15 s | 15-20 s | 20-25 s | 25-30 s | 30-35 s | 35-40 s | 40-45 s | 45-50 s | 50-55 s | 55-60 s |
| 1 | 11.03% | 0.24% | 0.04% | 0.00% | 1.57% | 0.12% | 0.04% | 0.04% | 0.00% | 0.00% | 0.04% | 0.00% | 3 | 10.94% | 0.12% | 0.00% | 0.04% | 0.00% | 0.04% | 0.00% | 0.00% | 0.00% | 0.00% | 0.00% | 0.00% | 10 | 19.57% | 24.91% | 24.99% | 24.79% | 24.61% | 24.96% | 24.99% | 24.99% | 25.00% | 25.00% | 24.99% | 25.00% | 11 | 19.52% | 24.91% | 24.99% | 25.11% | 24.61% | 24.96% | 24.99% | 24.99% | 25.00% | 25.00% | 24.99% | 25.00% | 12 | 19.52% | 24.91% | 24.99% | 25.03% | 24.61% | 24.96% | 24.99% | 24.99% | 25.00% | 25.00% | 24.99% | 25.00% | 13 | 19.42% | 24.91% | 24.99% | 25.03% | 24.61% | 24.96% | 24.99% | 24.99% | 25.00% | 25.00% | 24.99% | 25.00% | Total | 100% | 100% | 100% | 100% | 100% | 100% | 100% | 100% | 100% | 100% | 100% | 100% |
|
|