search menu icon-carat-right cmu-wordmark

Correlations Between Quiescent Ports in Network Flows (Presentation)

September 2005 Presentation
Josh McNutt, Markus Deshon

In this presentation, the authors discuss using FloVis to perform network data analysis.


Software Engineering Institute


In this presentation, given at FloCon 2005, the authors introduce a method for detecting the onset of anomalous port-specific activity by recognizing deviation from correlated activity.