Abstract: An efficient light-weight method for defending against DDoS attacks at the source end was designed. The Bloom Filter was used to pick up the amount of doubtful new source IP of network packets. Then, on line VTP technology was used to detect abnormity. Ou

Key words: DDoS, Detection at the source-end, Bloom filter, On-line detection, Hurst parameter