Fig. 14From: HADEC: Hadoop-based live DDoS detection frameworkTotal time to detect DDoS attack in HADEC with 1000 threshold (detection time is measured in seconds and cluster size varies from 2 to 10 nodes). a 80–20 attack volume and 1000 threshold. b 60–40 attack volume and 1000 thresholdBack to article page