Use of MARKOV Chain for Early Detecting DDoS Attacks

DDoS has a variety of types mixed attacks. Botnet attackers can chain different attacks to confuse cybersecurity defenders. In this article, the attack type be represented as state model. Considering type, we use model calculate final probability. The probability is then converted into one prediction vector, and incoming detected early before IDS issues an alert. experiment results have shown that make multi-vector detection analysis easier.