Table 4.

Additional research findings on metric changes for attacks and normal operation.

Attack	Metrics
	LTotal	${\mathit{D}}_{\mathit{L}\mathit{g}}$	Ratios,rr	$\mathit{D}\mathit{e}{\mathit{v}}_{\mathit{N},\mathit{i},}{}_{\mathit{s}}$	$\mathit{D}\mathit{e}{\mathit{v}}_{\mathit{N},\mathit{i},}{}_{\mathit{r}}$
SYN-flood	275	7632	2.5825	8.375	14.125
ICMP-flood	645	51.266	22.6763	10.666	18.666
Black- hole	133	3540	0	−5.75	−9.0
Normal	144	455	0.98	−5.75	5.75