As a special type of denial of service (DoS) attacks, the TCP‐targeted low‐rate.denial of service (LDoS) attacks have the characteristics of low average rate.and strong concealment, so it is difficult to identify such attack traffic. As.multifractal characteristics exist in network traffic, a new id