Correlations Between Quiescent Ports in Network Flows (Presentation)
September 2005 • Presentation
Josh McNutt, Markus Deshon
In this presentation, the authors discuss using FloVis to perform network data analysis.
Abstract
In this presentation, given at FloCon 2005, the authors introduce a method for detecting the onset of anomalous port-specific activity by recognizing deviation from correlated activity.