Identifying statistically anomalous regions in time series of network traffic
Fernando Silveira, Christophe Diot · 2007
Traffic anomalies are specific types of events and conditions which differ from the normal or expected network behavior, and therefore should be brought to the attention of network operators. Examples of such events include, but are not limited to link or router outages, Denial-of-Service (DoS) attacks, flash crowds, port scans and misconfigured devices.