When Time Meets Space: Entropy Integration and Dynamic Threshold for Adaptive DDoS Detection in SDN
A lightweight spatiotemporal entropy-based detector for DDoS attacks using a constrained second-order Exponentially Weighted Moving Average threshold that jointly tracks entropy trend and volatility is proposed.