This paper proposes an anomaly detection based on Web user access behavior for the defense of application layer Distributed Denial-of-Service (DDoS) attack.

• 提出一种基于Web用户访问行为的异常检测方案；用于检测应用层上的分布式拒绝服务攻击；并以具有非稳态流特性的大型活动网站为例；进行应用研究.