Abstract: This paper presented a run-time model that can efficiently detect network attacks. The model resolves the problem that classic method can＇t distinguish anomalies from attacks. Combining the characteristics of normal traffic, an efficient measure and algor

Key words: Distribution denial-of-service, Attack, Detection, Model,Algorithm