Abstract: DDOS, worm and mass mailing have a significant growth recent years, which has endangered Internet security. Most attack like worm has the nature of aggressive, greedy and behavior pattern of self-similar. This paper proposed an attack behavior analysis ba

Key words: Massive malicious activity, Frequent pattern mining, 2-page hash table algorithm