Fig. 9From: HADEC: Hadoop-based live DDoS detection frameworkDetection time at Hadoop cluster with 500 threshold (detection time is measured in seconds and cluster size varies from 2 to 10 nodes). a 80–20 attack volume.b 60–40 attack volumeBack to article page