Fig. 13From: HADEC: Hadoop-based live DDoS detection frameworkTotal time to detect DDoS attack in HADEC with 500 threshold (detection time is measured in seconds and cluster size varies from 2 to 10 nodes). a 80–20 attack volume and 500 threshold. b 60–40 attack volume and 500 thresholdBack to article page