Preprint Open access
Estimation is Not Enough: Carpet-Bombing Detection via Per-Packet Uniformity Testing
Carpet-bombing attacks spread traffic uniformly across one or more destination IP prefixes, keeping every host in the prefix below alarm thresholds while exhausting prefix-level defenses. Existing carpet-bombing detectors run at seconds-to-minutes latency, too slow to respond within the attack window. Sketches support …