Choosing parameters for detecting DDoS attack

DDoS attack has always been a major threat for information security. Realizing the complexity and difficulty in dest-end detection, researchers have switched their focus on “source-end detection”. And CUSUM is considered an efficient method in source-end detection. However, there is no guidance about how to choose the parameters in CUSUM, which dramatically affect the performance of detections. So this article discusses and simulates the selection of these parameters, to provide reference for further research.