Inferring Internet denial-of-service activity (2001)

by David Moore, Geoffrey M Voelker, Stefan Savage
Venue:In Proceedings of the Tenth USENIX Security Symposium