Figure 2
The diagram shows a network architecture arranged from left to right with multiple connected components, including devices, servers, and two labeled network zones. At the top left, a rectangular label reads “Connected To F 6-Modem I P 205.174.165.81 or 24” with a curved line leading downward to a network device. Below it, a label reads “Interface Internal – I P address 172.16.0.5”, pointing to a rack-mounted switch. Three stacked rectangular devices appear on the left, labeled “Core S W – Layer 3”, with cables connecting them. From these switches, curved lines extend rightward toward a large oval labeled “Victim-Network”. Above this connection, a cloud icon is centered at the top, with zigzag lightning-shaped lines extending from both sides of the cloud to cylindrical firewall icons on the left and right, showing external connectivity. Inside the large oval labeled “Victim-Network”, a smaller label reads “TEST BED 1.C A 192.168.50. X or 24 G W: 192.168.50.253”. Within this area are multiple computer icons labeled “Win Vista 192.168.50. X”, “Win 8.1 192.168.50. Y”, “Win 7 192.168.50. Z”, and “Win 10-32 192.168.50. W”. Two server icons are also present, labeled “Capturing Server” and “Ubuntu16 Webserver 192.168.50. A”. To the right of the victim network, a second large oval labeled “Third-Party Company” contains the text “Attack-Network”, with a label above it reading “Attack-Network”. A curved line connects the right-side firewall icon down into this attack network.Typical CIC-DDoS2019 network architecture. Source: Created by the authors of CIC-DDoS2019