发明名称 Streaming algorithms for robust, real-time detection of DDoS attacks
摘要 A distinct-count estimate is obtained in a guaranteed small footprint using a two level hash, distinct count sketch. A first hash fills the first-level hash buckets with an exponentially decreasing number of data-elements. These are then uniformly hashed to an array of second-level-hash tables, and have an associated total-element counter and bit-location counters. These counters are used to identify singletons and so provide a distinct-sample and a distinct-count. An estimate of the total distinct-count is obtained by dividing by the distinct-count by the probability of mapping a data-element to that bucket. An estimate of the total distinct-source frequencies of destination address can be found in a similar fashion. By further associating the distinct-count sketch with a list of singletons, a total singleton count and a heap containing the destination addresses ordered by their distinct-source frequencies, a tracking distinct-count sketch may be formed that has considerably improved query time.
申请公布号 US7669241(B2) 申请公布日期 2010.02.23
申请号 US20040954901 申请日期 2004.09.30
申请人 ALCATEL-LUCENT USA INC. 发明人 GANGULY SUMIT;GAROFALAKIS MINOS;RASTOGI RAJEEV;SABNANI KRISHAN
分类号 G06F12/14 主分类号 G06F12/14
代理机构 代理人
主权项
地址
您可能感兴趣的专利