Which technique involves analyzing traffic patterns to improve filtering and protection against DDoS?

• A. Traffic Pattern Analysis
• B. Drop Requests
• C. KFSensor
• D. Throttling

Answer: (A)

Analyzing traffic patterns to improve filtering and protection against DDoS relies on watching how traffic behaves over time, establishing what normal traffic looks like, and spotting deviations that signal an attack. By building baselines for metrics like request rate, source distribution, and timing, you can distinguish legitimate spikes from malicious floods. With that insight, security systems can adjust filtering rules, apply smarter rate limiting, and selectively drop or challenge traffic from suspicious sources, while keeping legitimate users served. This data-driven approach directly informs how to tune defenses rather than just taking a single action.

Dropping requests is a response action, not the analytical method that reveals what to filter or how to tailor defenses. KFSensor is a honeypot/IDS tool used to lure and study attackers, not the pattern-analysis technique itself. Throttling is a mitigation technique to limit traffic volume, but it doesn’t by itself involve analyzing traffic patterns to refine protection.