Volume-based DoS attack detection

Trellix IPS detects volume-based DoS attacks through threshold-based and statistical anomaly-based (learning-based) methods. Often a combination of these two methods is used.