{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T05:16:02Z","timestamp":1781673362656,"version":"3.54.5"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1933108"],"award-info":[{"award-number":["U1933108"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100006606","name":"Natural Science Foundation of Tianjin City","doi-asserted-by":"publisher","award":["17JCZDJC30900"],"award-info":[{"award-number":["17JCZDJC30900"]}],"id":[{"id":"10.13039\/501100006606","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100010882","name":"Tianjin Municipal Education Commission","doi-asserted-by":"publisher","award":["2019KJ117"],"award-info":[{"award-number":["2019KJ117"]}],"id":[{"id":"10.13039\/501100010882","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["3122018D007"],"award-info":[{"award-number":["3122018D007"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["3122018C003"],"award-info":[{"award-number":["3122018C003"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.2976609","type":"journal-article","created":{"date-parts":[[2020,2,27]],"date-time":"2020-02-27T22:16:57Z","timestamp":1582841817000},"page":"43920-43943","source":"Crossref","is-referenced-by-count":137,"title":["Low-Rate DoS Attacks, Detection, Defense, and Challenges: A Survey"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0691-1767","authenticated-orcid":false,"given":"Wu","family":"Zhijun","sequence":"first","affiliation":[{"name":"College of Electronic Information and Automation, Civil Aviation University of China, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Li","family":"Wenjing","sequence":"additional","affiliation":[{"name":"College of Electronic Information and Automation, Civil Aviation University of China, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8822-8354","authenticated-orcid":false,"given":"Liu","family":"Liang","sequence":"additional","affiliation":[{"name":"College of Electronic Information and Automation, Civil Aviation University of China, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1473-3729","authenticated-orcid":false,"given":"Yue","family":"Meng","sequence":"additional","affiliation":[{"name":"College of Electronic Information and Automation, Civil Aviation University of China, Tianjin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"1456","article-title":"The detection of LDoS attack based on the model of small signal","volume":"39","author":"wu","year":"2011","journal-title":"Acta Electronica Sinica"},{"key":"ref38","first-page":"1454","article-title":"The research of detecting low-rate DoS attacks based on hidden Markov model","volume":"31","author":"yue","year":"2015","journal-title":"J Signal Process"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/637209.637210"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1883612.1883613"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2003.1284203"},{"key":"ref30","first-page":"19","article-title":"Approach of detecting low-rate DoS attack based on combined features","volume":"38","author":"wu","year":"2017","journal-title":"J Commun"},{"key":"ref37","first-page":"1137","article-title":"Collaborative defense against periodic shrew DDoS attacks in frequency domain","volume":"66","author":"chen","year":"2005","journal-title":"ACM Trans Inf Syst Secur"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2006.04.007"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2808797.2808810"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2002.1189011"},{"key":"ref28","first-page":"79","article-title":"Detecting LDoS attack based on ASPQ","volume":"33","author":"zhang","year":"2012","journal-title":"J Commun"},{"key":"ref27","first-page":"50","article-title":"LDoS attacks detection approach based on singularity feature of network traffic","volume":"37","author":"zhang","year":"2016","journal-title":"Eng Comput"},{"key":"ref29","first-page":"49","article-title":"An approach of detecting distributed low-rate DoS attack based on the congestion participation rate","volume":"32","author":"zhang","year":"2010","journal-title":"Computing in Science & Eng"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2004.1348109"},{"key":"ref1","first-page":"75","article-title":"Low-rate TCP-targeted denial of service attacks (the shrew vs. the mice and elephants)","author":"kuzmanovic","year":"2003","journal-title":"Proc ACM Sigcomm"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICITCS.2015.7292994"},{"key":"ref22","first-page":"726","article-title":"Losing control of the Internet: Using the data plane to attack the control plane","author":"schuchard","year":"2011","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref21","first-page":"1","article-title":"Low-rate TCP-targeted DoS attack disrupts Internet routing","author":"zhang","year":"2006","journal-title":"Proc IEEE LCN Workshop Netw Security"},{"key":"ref24","author":"floyd","year":"2003","journal-title":"High-Speed TCP for Large Congestion Windows"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1400097.1400105"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2443807"},{"key":"ref25","first-page":"1","article-title":"H-TCP: TCP for high-speed and long-distance networks","author":"shorten","year":"2004","journal-title":"Proc 2nd Int Workshop Protocols Fast Long-Distance Netw"},{"key":"ref50","first-page":"432","article-title":"A Q-learning based real-time mitigating mechanism against LDoS attack and its modeling and simulation with CPN","volume":"48","author":"liu","year":"2011","journal-title":"J Comput Res Develop"},{"key":"ref51","first-page":"11","article-title":"Detection method of LDoS attacks based on combination of ANN & KPCA","volume":"39","author":"wu","year":"2018","journal-title":"J Commun"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2633579"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.031413.00127"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2010.06.004"},{"key":"ref40","first-page":"1778","article-title":"Modified method of detecting DDoS attacks","volume":"30","author":"zhang","year":"2010","journal-title":"J Comput Appl"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-014-0388-6"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7081075"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2046660.2046676"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD.2012.23"},{"key":"ref16","first-page":"1","article-title":"Bandwidth stealing via link targeted RoQ attacks","author":"guirguis","year":"2004","journal-title":"Proc 2nd IASTED Int Conf Commun Comput Netw"},{"key":"ref17","year":"2000","journal-title":"Computing TCP’s Retransmission Timer"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2005.1498361"},{"key":"ref19","first-page":"930","article-title":"A low-rate DoS detection method based on feature extraction using wavelet transform","volume":"20","author":"he","year":"2009","journal-title":"J Softw"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2014.2325045"},{"key":"ref3","first-page":"1","article-title":"On a new class of pulsing denial-of-service attacks and the defense","author":"luo","year":"2005","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref6","first-page":"1196","article-title":"Research and survey of low-rate Denial of Service attacks","author":"qiao","year":"2011","journal-title":"Proc IEEE Int Conf Adv Commun Technol"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICCIC.2012.6510186"},{"key":"ref8","first-page":"1","article-title":"A survey of low-rate Denial of Service attacks","volume":"2","author":"he","year":"2008","journal-title":"Journal of Frontiers of Computer Science and Technology"},{"key":"ref7","first-page":"591","article-title":"Survey on research and progress of low-rate Denial of Service attacks","volume":"25","author":"wen","year":"2014","journal-title":"J Softw"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2009.5402593"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2011.2107320"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2010.05.091407"},{"key":"ref45","doi-asserted-by":"crossref","first-page":"98","DOI":"10.1109\/CC.2017.7961367","article-title":"Low-rate DoS attack flows filtering based on frequency spectral analysis","volume":"14","author":"wu","year":"2017","journal-title":"China Commun"},{"key":"ref48","first-page":"345","article-title":"Defense against low-rate TCP-targeted denial-of-service attacks","author":"yang","year":"2004","journal-title":"Proc 9th Int Symp Comput Commun"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2010.I8P0308"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/11534310_46"},{"key":"ref41","first-page":"204","article-title":"Research on DDoS detection in multi-tenant cloud based on entropy change","volume":"37","author":"wang","year":"2016","journal-title":"J Commun"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948116"},{"key":"ref43","first-page":"139","article-title":"Detection method of LDoS attack based on ACK serial number step-length","volume":"39","author":"wu","year":"2018","journal-title":"J Commun"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09016229.pdf?arnumber=9016229","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,8]],"date-time":"2022-09-08T19:51:05Z","timestamp":1662666665000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9016229\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/access.2020.2976609","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}