Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Presentation

Correlations Between Quiescent Ports in Network Flows (Presentation)

  • Abstract

    In this presentation, given at FloCon 2005, the authors introduce a method for detecting the onset of anomalous port-specific activity by recognizing deviation from correlated activity.

  • Download

Part of a Collection

FloCon 2005 Collection