The algorithm of CUSUM is utilized to improve the detection mechanism of D-WARD, and the problem of not being able to determine the end of DDoS attacks with CUSUM algorithm is solved.

• 本文中采用CUSUM算法改进了原始D-WARD系统的检测模块，并解决了CUSUM算法内在的无法有效确定DDoS攻击结束时刻的问题。