Table 1 Notations used in the methodology for various notations used in the proposed approach and description

H(Sc_IP)

Source entropy

Sc_IP

Source IP

p(Sc_IP_i)

Probability of source imp

X _i

Number of packets received for Sc_IP_i

H(t_ID)

Traffic entropy

p(t_ID)

Probability of traffic

Y _i

Number of packets received for (t_ID)

u,v

Tolerance factors

(H_c(Sc_IP))

Current source entropy

H_c(t_ID)

Current traffic entropy

H_N(Sc_IP)

Initial source entropy

H_N(t_ID)

Initial traffic entropy

H_N(Sc_IP) + u*σ_{Sc_IP}))

Upper threshold source entropy

(H_N(Sc_IP)−u^∗σ_{tc_ID}))

Lower threshold source entropy

H_N(t_ID) − v^∗σ_{t_ID}))

Lower threshold traffic entropy

H_N(t_ID) + v^∗σ_{t_ID}))

Upper threshold traffic entropy

σ_{Sc_IP}

Standard deviation of source

σ_{t_ID}

Standard deviation of traffic