{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T03:10:35Z","timestamp":1778814635865,"version":"3.51.4"},"reference-count":33,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T00:00:00Z","timestamp":1775001600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,4]]},"DOI":"10.1016\/j.comnet.2026.112105","type":"journal-article","created":{"date-parts":[[2026,2,14]],"date-time":"2026-02-14T00:23:26Z","timestamp":1771028606000},"page":"112105","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Intelligent algorithm for dynamic handling of DDoS based on action cost in a dual-Stack environment"],"prefix":"10.1016","volume":"278","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-4491-4546","authenticated-orcid":false,"given":"Tao","family":"Zhuang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7218-6321","authenticated-orcid":false,"given":"Zhaogang","family":"Shu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-1222-1734","authenticated-orcid":false,"given":"Shuwu","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9061-1525","authenticated-orcid":false,"given":"Qiang","family":"Tu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0058-669X","authenticated-orcid":false,"given":"Haihui","family":"Xie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-4968-7186","authenticated-orcid":false,"given":"Zepeng","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"issue":"1","key":"10.1016\/j.comnet.2026.112105_bib0001","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1109\/JPROC.2014.2371999","article-title":"Software-defined networking: a comprehensive survey","volume":"103","author":"Kreutz","year":"2014","journal-title":"Proc. IEEE"},{"issue":"2","key":"10.1016\/j.comnet.2026.112105_bib0002","doi-asserted-by":"crossref","first-page":"1392","DOI":"10.1109\/COMST.2020.2975911","article-title":"Blockchain and machine learning for communications and networking systems","volume":"22","author":"Liu","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"4","key":"10.1016\/j.comnet.2026.112105_bib0003","doi-asserted-by":"crossref","first-page":"3133","DOI":"10.1109\/COMST.2019.2916583","article-title":"Applications of deep reinforcement learning in communications and networking: a survey","volume":"21","author":"Luong","year":"2019","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"1","key":"10.1016\/j.comnet.2026.112105_bib0004","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1109\/TETCI.2017.2772792","article-title":"A deep learning approach to network intrusion detection","volume":"2","author":"Shone","year":"2018","journal-title":"IEEE Trans. Emerg. Top. Comput. Intell."},{"key":"10.1016\/j.comnet.2026.112105_bib0005","series-title":"2024 8th International Conference on Information Technology, Information Systems and Electrical Engineering (ICITISEE)","first-page":"202","article-title":"Detecting DDoS attacks through decision tree analysis: an EDA approach with the CIC DDoS 2019 dataset","author":"Zy","year":"2024"},{"issue":"2","key":"10.1016\/j.comnet.2026.112105_bib0006","article-title":"Adversarial ICMPv6 messages based dataset for the detection of DoS attacks","volume":"2","author":"Devi","year":"2025","journal-title":"J. Comp. Sci. Inf."},{"issue":"10","key":"10.1016\/j.comnet.2026.112105_bib0007","doi-asserted-by":"crossref","first-page":"2358","DOI":"10.1109\/JSAC.2018.2869997","article-title":"JESS: joint entropy-based DDoS defense scheme in SDN","volume":"36","author":"Kalkan","year":"2018","journal-title":"IEEE J. Sel. Areas Commun."},{"issue":"6","key":"10.1016\/j.comnet.2026.112105_bib0008","doi-asserted-by":"crossref","first-page":"4019","DOI":"10.1109\/TDSC.2021.3116345","article-title":"Tracking normalized network traffic entropy to detect DDoS attacks in P4","volume":"19","author":"Ding","year":"2021","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.comnet.2026.112105_bib0009","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1016\/j.future.2021.11.009","article-title":"Software-defined DDoS detection with information entropy analysis and optimized deep learning","volume":"129","author":"Liu","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.comnet.2026.112105_bib0010","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2023.100812","article-title":"Performance analysis of entropy variation-based detection of DDoS attacks in IoT","volume":"23","author":"Pandey","year":"2023","journal-title":"Internet of Things"},{"key":"10.1016\/j.comnet.2026.112105_bib0011","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2024.110327","article-title":"SYNTROPY: TCP SYN DDoS attack detection for software defined network based on r\u00e9nyi entropy","volume":"244","author":"Shirsath","year":"2024","journal-title":"Comput. Networks"},{"key":"10.1016\/j.comnet.2026.112105_bib0012","article-title":"A low-rate DDoS detection and mitigation for SDN using renyi entropy with packet drop","volume":"68","author":"Ahalawat","year":"2022","journal-title":"J. Inf. Secur. Appl."},{"issue":"1","key":"10.1016\/j.comnet.2026.112105_bib0013","article-title":"An entropy and machine learning based approach for DDoS attacks detection in software defined networks","volume":"14","author":"Hassan","year":"2024","journal-title":"Sci. Rep."},{"issue":"20","key":"10.1016\/j.comnet.2026.112105_bib0014","doi-asserted-by":"crossref","first-page":"17934","DOI":"10.1109\/JIOT.2023.3279615","article-title":"A collaborative stealthy DDoS detection method based on reinforcement learning at the edge of internet of things","volume":"10","author":"Feng","year":"2023","journal-title":"IEEE Internet Things J."},{"issue":"3","key":"10.1016\/j.comnet.2026.112105_bib0015","doi-asserted-by":"crossref","first-page":"2262","DOI":"10.1109\/TITS.2021.3066404","article-title":"DDoS mitigation based on space-time flow regularities in IoV: a feature adaption reinforcement learning approach","volume":"23","author":"Li","year":"2021","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"10.1016\/j.comnet.2026.112105_bib0016","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2022.103444","article-title":"A flexible SDN-based framework for slow-rate DDoS attack mitigation by using deep reinforcement learning","volume":"205","author":"Yungaicela-Naula","year":"2022","journal-title":"J. Netw. Comput. Appl."},{"issue":"6","key":"10.1016\/j.comnet.2026.112105_bib0017","doi-asserted-by":"crossref","first-page":"4052","DOI":"10.1109\/TDSC.2021.3118081","article-title":"Rl-shield: mitigating target link-flooding attacks using sdn and deep reinforcement learning routing algorithm","volume":"19","author":"Rezapour","year":"2021","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.comnet.2026.112105_bib0018","doi-asserted-by":"crossref","first-page":"637","DOI":"10.1016\/j.future.2023.08.007","article-title":"SDN\/NFV-Based framework for autonomous defense against slow-rate DDoS attacks by using reinforcement learning","volume":"149","author":"Yungaicela-Naula","year":"2023","journal-title":"Future Gener. Comput. Syst."},{"issue":"4","key":"10.1016\/j.comnet.2026.112105_bib0019","doi-asserted-by":"crossref","first-page":"5317","DOI":"10.1109\/TVT.2022.3233880","article-title":"A transfer double deep Q network based DDoS detection method for internet of vehicles","volume":"72","author":"Li","year":"2023","journal-title":"IEEE Trans. Veh. Technol."},{"key":"10.1016\/j.comnet.2026.112105_bib0020","doi-asserted-by":"crossref","first-page":"107952","DOI":"10.1109\/ACCESS.2019.2930803","article-title":"A new smart router-throttling method to mitigate DDoS attacks","volume":"7","author":"Xia","year":"2019","journal-title":"IEEE Access"},{"issue":"5","key":"10.1016\/j.comnet.2026.112105_bib0021","first-page":"5782","article-title":"IPv6 flood attack detection based on epsilon greedy optimized q learning in single board compute","volume":"13","author":"Daru","year":"2023","journal-title":"Int. J. Electr. Comput. Eng."},{"key":"10.1016\/j.comnet.2026.112105_bib0022","series-title":"International Conference on the Theory and Application of Cryptology and Information Security","first-page":"1","article-title":"Finding SHA-1 characteristics: general results and applications","author":"De Canniere","year":"2006"},{"issue":"14","key":"10.1016\/j.comnet.2026.112105_bib0023","article-title":"A review of comparative study of md5 and ssh security algorithm","volume":"104","author":"Gupta","year":"2014","journal-title":"Int. J. Comput. Appl."},{"key":"10.1016\/j.comnet.2026.112105_bib0024","series-title":"AIP Conference Proceedings","doi-asserted-by":"crossref","DOI":"10.1063\/5.0187430","article-title":"Data transmission system via bluetooth using validation cyclic redundancy check 32 (CRC32) method","volume":"2744","author":"Hadiatna","year":"2024"},{"issue":"5","key":"10.1016\/j.comnet.2026.112105_bib0025","doi-asserted-by":"crossref","first-page":"2158","DOI":"10.1109\/TNET.2022.3169136","article-title":"Disrupting the SDN control channel via shared links: attacks and countermeasures","volume":"30","author":"Xie","year":"2022","journal-title":"IEEE\/ACM Trans. Networking"},{"key":"10.1016\/j.comnet.2026.112105_bib0026","article-title":"Markov decision processes","volume":"428","author":"Kallenberg","year":"2011","journal-title":"Lect. Notes. Univ. of Leiden"},{"key":"10.1016\/j.comnet.2026.112105_bib0027","doi-asserted-by":"crossref","first-page":"12785","DOI":"10.1109\/ACCESS.2024.3356731","article-title":"Outlier detection performance of a modified z-score method in time-series rss observation with hybrid scale estimators","volume":"12","author":"Yaro","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112105_bib0028","series-title":"International Conference on Machine Learning","first-page":"4344","article-title":"Learning by playing solving sparse reward tasks from scratch","author":"Riedmiller","year":"2018"},{"issue":"3","key":"10.1016\/j.comnet.2026.112105_bib0029","doi-asserted-by":"crossref","first-page":"1371","DOI":"10.1109\/TCSI.2023.3346029","article-title":"A novel online adaptive dynamic programming algorithm with adjustable convergence rate","volume":"71","author":"Wang","year":"2024","journal-title":"IEEE Trans. Circuits Syst. I Regul. Pap."},{"issue":"1","key":"10.1016\/j.comnet.2026.112105_bib0030","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1007\/s10458-023-09633-6","article-title":"A survey of multi-agent deep reinforcement learning with communication","volume":"38","author":"Zhu","year":"2024","journal-title":"Auton. Agent Multi Agent Syst."},{"key":"10.1016\/j.comnet.2026.112105_bib0031","series-title":"Learning for Dynamics and Control","first-page":"486","article-title":"A theoretical analysis of deep Q-learning","author":"Fan","year":"2020"},{"key":"10.1016\/j.comnet.2026.112105_bib0032","unstructured":"M. Babaeizadeh, I. Frosio, S. Tyree, J. Clemons, J. Kautz, Reinforcement learning through asynchronous advantage actor-critic on a gpu, (2016). arXiv: 1611.06256."},{"key":"10.1016\/j.comnet.2026.112105_bib0033","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","article-title":"Deep reinforcement learning with double q-learning","volume":"30","author":"Van Hasselt","year":"2016"}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626001179?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626001179?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T02:28:38Z","timestamp":1778812118000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626001179"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4]]},"references-count":33,"alternative-id":["S1389128626001179"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112105","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,4]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Intelligent algorithm for dynamic handling of DDoS based on action cost in a dual-Stack environment","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112105","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"112105"}}