Change-point monitoring for the detection of DoS attacks
Analysis of a denial of service attack on TCP