Correlations Between Quiescent Ports in Network Flows (Presentation)
September 2005 • Presentation
Josh McNutt, Markus Deshon
In this presentation, the authors discuss using FloVis to perform network data analysis.
Software Engineering Institute
In this presentation, given at FloCon 2005, the authors introduce a method for detecting the onset of anomalous port-specific activity by recognizing deviation from correlated activity.