David Moore Colleen Shannon Douglas J. Brown Geoffrey M. Voelker Stefan Savage Inferring Internet denial-of-service activity. 115-139 2006 24 ACM Trans. Comput. Syst. 2 http://doi.acm.org/10.1145/1132026.1132027 db/journals/tocs/tocs24.html#MooreSBVS06