 |
The training and detecting CPU time is the other critical parameter to evaluate the performance of locality sensitive ITSVM method. We define it as the time when method trains with semi-supervised incremental data and detects whether malicious flows exist or not. As the following figure shown, the CPU time of ISVM is increased continually with the growth of increase set size, and bumps to almost 100s from 60s. Same to accuracy, LPA method is stopped when size is bigger than 15k. Compared with them, our proposed method training and detecting time is stable in 50s. Thus, take both detection accuracy score and CPU time into account, locality sensitive ITSVM, which has better performance, can detect DDoS with higher accuracy and shorter CPU time. |
IEEE/ICACT20210143 Slide.13
[Big Slide]