DDoS Saturation Simulation (gNB -> UPF -> Services)

This standalone model focuses on DDoS behaviour only. Legitimate traffic is capped so that it can never exceed 80% of UPF load on its own. As malicious traffic rises, legitimate service collapses and can become negligible near full saturation.

Educational offline simulation only - no live network traffic is produced.

Simulation Controls

Load: 0%
Legitimate devices
80
Malicious devices (botnet)
40
Traffic per legitimate device
4.0 req/s
Traffic per malicious device
9.0 req/s
UPF capacity
1000 req/s
Collapse sharpness (gamma)
3.0
Legitimate floor at full saturation
2.0%
Simulation speed
1.0x
Rule:
L_off = min(N_legit * R_legit, 0.8 * C)
Capacity sharing:
L_srv = min(L_off, max(0, C - B_off)), and reduction starts only when remaining UPF capacity is not enough.

Detection Thresholds

Bot pressure threshold
0.65x
UPF load threshold
82%
Device rate factor
0.48x
Minimum suspect rate
2.5 req/s
Confirmation time
1.5 s
OFF

Traffic and UPF State

UPF load
0%
Legitimate served
0 req/s
Legitimate dropped
0 req/s
Botnet dropped
0 req/s
Load Legitimate service factor Legitimate drop rate Estimated latency Total served (legit): 0

Detection Logs

0 events

Detected Malicious Devices (IMEI)

0 detected