We review the long-established rational subgrouping principle for determining an effective
sampling plan for process monitoring. We present some other general advice that has been …

A recent escalation of application layer Denial of Service (DoS) attacks on the Internet has
quickly shifted the interest of the research community traditionally focused on network-based …

The traffic classification problem has recently attracted the interest of both network operators
and researchers. Several machine learning (ML) methods have been proposed in the …

Sampling has become an essential component of scalable Internet traffic monitoring and
anomaly detection. A new flow-based sampling technique that focuses on the selection of …

The problem of quickest detection of a change in distribution is considered under the
assumption that the prechange distribution is known, and the postchange distribution is only …

We adapt the classic cusum change-point detection algorithm to handle non-stationary
sequences that are typical with network surveillance applications. The proposed algorithm …

We develop two cusum change-point detection algorithms for data network monitoring
applications where numerous and various performance and reliability metrics are available …

Real-time Anomaly Detection Systems (ADSs) use packet sampling to realize traffic analysis
at wire speeds. While recent studies have shown that a considerable loss of anomaly …

In this paper, we propose an accurate sampling scheme for defeating SYN flooding attacks
as well as TCP portscan activity. The scheme examines TCP segments to find at least one of …

Sampling has become an essential component of scalable Internet traffic monitoring and
anomaly detection. In this paper we consider the problem of studying and evaluating the …