A Distinction Method of Flooding DDoS and Flash Crowds Based on User Traffic Behavior | IEEE Conference Publication | IEEE Xplore