Denial of service attacks flood a service with numerous queries so that genuine requests cannot processed any more. Detection often relies on thresholds which may cut out genuine requests when the genuine demand rises strongly. A new better test is based on the concept of entropy, more precisely a mismatch of the entropy between target addresses and source addresses. See http://www.neat-news.com/2023/08/216.php. #dos #denial_of_service_attack #detection