How PCA is implemented in the code?

[JoseMarquesJunior]

Hello! Nice work!

How PCA is implemented in the code? It seems that it is using some linear regression model (statsmodels.regression.linear_model.OLS) between 'source IP' and 'destination IP'.
I do not understand why Ydist coverge to the interval (-1,1) and how Ydist is related to PCA residuals.

Another question: in the original paper "A Novel DDoS Attack..." the autors describes a attack without a fixed target. But the implemented attack requires a IP target. How it works?