My supervisor Dr George Loukas has conducted extensive work on DDOS detection which was implemented in NS-2. A link to his profile here: https://www.researchgate.net/profile/George_Loukas2 - see his papers on Denial of Service detection in a self-aware network.