{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,29]],"date-time":"2025-09-29T08:27:56Z","timestamp":1759134476033,"version":"3.37.3"},"reference-count":24,"publisher":"Wiley","license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["60703023","90204014","20090110"],"award-info":[{"award-number":["60703023","90204014","20090110"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["60703023","90204014","20090110"],"award-info":[{"award-number":["60703023","90204014","20090110"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Technology Development Plan of Jilin Province of China","award":["60703023","90204014","20090110"],"award-info":[{"award-number":["60703023","90204014","20090110"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Journal of Sensors"],"published-print":{"date-parts":[[2015]]},"abstract":"<jats:p>We propose using multiple observed features of network traffic to identify new high-distributed low-rate quality of services (QoS) violation so that detection accuracy may be further improved. For the multiple observed features, we choose<jats:italic>F feature<\/jats:italic>in TCP packet header as a microscopic feature and,<jats:italic>P feature<\/jats:italic>and<jats:italic>D feature<\/jats:italic>of network traffic as macroscopic features. Based on these features, we establish<jats:italic>multistream fused hidden Markov model<\/jats:italic>(MF-HMM) to detect stealthy low-rate denial of service (LDoS) attacks hidden in legitimate network background traffic. In addition, the threshold value is dynamically adjusted by using Kaufman algorithm. Our experiments show that the additive effect of combining multiple features effectively reduces the false-positive rate. The average detection rate of MF-HMM results in a significant 23.39% and 44.64% improvement over typical power spectrum density (PSD) algorithm and nonparametric cumulative sum (CUSUM) algorithm.<\/jats:p>","DOI":"10.1155\/2015\/465402","type":"journal-article","created":{"date-parts":[[2015,8,4]],"date-time":"2015-08-04T02:28:36Z","timestamp":1438655316000},"page":"1-11","source":"Crossref","is-referenced-by-count":9,"title":["Accurately Identifying New QoS Violation Driven by High-Distributed Low-Rate Denial of Service Attacks Based on Multiple Observed Features"],"prefix":"10.1155","volume":"2015","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5572-7405","authenticated-orcid":true,"given":"Jian","family":"Kang","sequence":"first","affiliation":[{"name":"Department of Computer Science & Technology, Jilin University, Changchun 130012, China"},{"name":"Key Laboratory of Symbol Computation and Knowledge Engineering of Ministry of Education, Jilin University, Changchun 130012, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mei","family":"Yang","sequence":"additional","affiliation":[{"name":"Department of Software Engineering, Jilin University, Changchun 130012, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junyao","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of EECS, University of Central Florida, Orlando, FL 32816, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"key":"5","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2006.04.007"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2009.2024719"},{"issue":"1","key":"7","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1299\/jcst.2.1","volume":"2","year":"2008","journal-title":"Journal of Frontiers of Computer Science & Technology"},{"issue":"6","key":"9","first-page":"1456","volume":"39","year":"2011","journal-title":"Acta Electronica Sinica"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2012.03.002"},{"issue":"12","key":"11","first-page":"55","volume":"31","year":"2010","journal-title":"Journal on Communications"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1109\/lcomm.2010.05.091407"},{"journal-title":"ACM Transactions on Information and System Security","first-page":"2","year":"2005","key":"13"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2005.04008"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.3837\/tiis.2012.07.007"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1155\/2014\/496376"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2013.7.5.26"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2011.2107320"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1109\/tsp.2003.822353"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1023\/a:1007649326333"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1109\/5.18626"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1360\/crad20050921"},{"issue":"1","key":"27","first-page":"71","volume":"29","year":"2008","journal-title":"Tongxin Xuebao\/Journal on Communications"},{"issue":"5","key":"29","first-page":"79","volume":"33","year":"2012","journal-title":"Journal on Communications"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1109\/tau.1967.1161901"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1109\/7.784064"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2005.35"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20757-0_1"},{"key":"35","doi-asserted-by":"publisher","DOI":"10.3724\/sp.j.1146.2012.01444"}],"container-title":["Journal of Sensors"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/js\/2015\/465402.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/js\/2015\/465402.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/js\/2015\/465402.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,23]],"date-time":"2017-06-23T12:57:21Z","timestamp":1498222641000},"score":1,"resource":{"primary":{"URL":"http:\/\/www.hindawi.com\/journals\/js\/2015\/465402\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"references-count":24,"alternative-id":["465402","465402"],"URL":"https:\/\/doi.org\/10.1155\/2015\/465402","relation":{},"ISSN":["1687-725X","1687-7268"],"issn-type":[{"type":"print","value":"1687-725X"},{"type":"electronic","value":"1687-7268"}],"subject":[],"published":{"date-parts":[[2015]]}}}