## 3 Proposed Detection Mechanism
### Traffic Classification
**List of Symbols**

Symbol Description

\(n\)

Number of packets

\(TH\)

The threshold value of packets

\(\mu\)

Mean of a packet

\(\mu\)

Flow fi payload mean

\(\sigma\)_FiPS_

Flow fi payload standard deviation

\(\mu\)_FiRM_

Flow fi receiving time mean

\(\sigma\)_FiRS_

Flow fi receiving time standard deviation

\(h_{x}\)

Attribute x

\(M\)

Network

\(p[h/f]_{c}\)

Likelihood probability of flash crowd

\(pl[h/a]\)

Likelihood probability of attack class

\(RL\)

Receiving list

_interval_

Period between two nodes

\(slot\)

Combination of intervals

\(Pi\)

Packets

\(\sigma\)

Standard deviation

\(p[f_{-}(c)]\)

Prior probability of flash crowd

\(pl[a]\)

Prior probability of attack class

\(\mathrm{P}\left[f_{c}/h\right]\)

Posterior probability of flash crowd

\(pl[a/h]\)

Posterior probability of DDoS attack

\(n\)

Total number of nodes

\(class_{i}\)

Prior probability of class

\(PLS\)

Payload size of packet

\(RT\)

Received time of packet

## References

* (1) [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON] Quantum Diffie-Hellman Extended to Dynamic Quantum Group Key Agreement for e-Healthcare Multi-Agent Systems in Smart Cities. _Sensors_**2020**, _20_, 3940. [CrossRef] [PubMed]
* (2) [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] MASEMUL: A Simulation Tool for Movement-Aware MANET Scheduling Strategies for Multimedia Communications. _Wirel. Commun. Mob. Comput._**2021**, _2021_, 6651402. [CrossRef]
* (3) [PERSON]; [PERSON]; [PERSON]; [PERSON] Secure routing against DDoS attack in wireless sensor network. In Proceedings of the 2017 3 rd International Conference on Computational Intelligence & Communication Technology (CICT), Ghaziabad, India, 9-10 February 2017; pp. 1-6. * (4) [PERSON] Wireless sensor networks: Routing protocols and security issues. In Proceedings of the Fifth International Conference on Computing, Communications and Networking Technologies (ICCCNT), Hefei, China, 11-13 July 2014; pp. 1-5. * (5) [PERSON]; [PERSON] Security in Wireless Sensor Networks: DoS Perspective. _Int. J. Eng. Res. Technol. (IJERT)_**2017**, \(6\), 311-316. * (6) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] STONE: A streaming DDoS defense framework. _Expert Syst. Appl._**2015**, _42_, 9620-9633. [CrossRef]* [PERSON] et al. (2020) [PERSON]; [PERSON] [PERSON]; [PERSON] Defenses against perception-layer attacks on iot smart furniture for impaired people. _IEEE Access_**2020**, \(8\), 119795-119805. [CrossRef]
* [PERSON] et al. (2016) [PERSON]; [PERSON]; [PERSON] Behavior-based detection of application layer distributed denial of service attacks during flash events. _Turk. J. Electr. Eng. Comput. Sci._**2016**, _24_, 510-523. [CrossRef]
* [PERSON] et al. (2018) [PERSON]; [PERSON]; [PERSON] Statistical application fingerprinting for DDoS attack mitigation. _IEEE Trans. Inf. Forensics Secur._**2018**, _14_, 1471-1484. [CrossRef]
* [PERSON] et al. (2004) [PERSON]; [PERSON] DDoS attacks and defense mechanisms: Classification and state-of-the-art. _Comput. Netw._**2004**, _44_, 643-666. [CrossRef]
* [PERSON] et al. (2011) [PERSON]; [PERSON]; [PERSON]; [PERSON] Parametric differences between a real-world distributed denial-of-service attack and a flash event. In Proceedings of the 2011 Sixth International Conference on Availability, Reliability and Security, Vienna, Austria, 22-26 August 2011; pp. 210-217. * [PERSON] and [PERSON] (2008) [PERSON]; [PERSON] Detecting denial of service attacks in sensor networks. _J. Comput._**2008**, \(4\), 15-29. * [PERSON] et al. (2016) [PERSON]; [PERSON]; [PERSON] Distributed denial of service attack detection using Naive Bayes Classifier through Info Gain Feature Selection. In Proceedings of the International Conference on Informatics and Analytic, Pondicherry, India, 25-26 August 2016; ACM: New York, NY, USA, 2016; Volume 54, pp. 1-54. * [PERSON] and [PERSON] (2013) [PERSON]; [PERSON] A statistical approach to classify and identify DDoS attacks using UCLA dataset. _Int. J. Adv. Res. Comput. Eng. Technol. (IJARCET)_**2013**, \(2\), 1766-1770.