Time series are recorded values of an interesting phenomenon such as stock prices,
household incomes, or patient heart rates over a period of time. Time series data mining …

Many interesting large-scale systems are distributed systems of multiple communicating
components. Such systems can be very hard to debug, especially when they exhibit poor …

In this paper, we explore new possibilities, created by programmable switches, for fast
rerouting upon signals triggered by Internet traffic disruptions. We present Blink, a data …

The term network surveillance is defined in general terms and illustrated with many
examples. Statistical methodologies that can be used as tools for network surveillance are …

A number of problems in network operations and engineering call for new methods of traffic
analysis. While most existing traffic analysis methods are fundamentally temporal, there is a …

Signal processing techniques have been applied recently for analyzing and detecting
network anomalies due to their potential to find novel or unknown intrusions. In this paper …

In this paper we analyze a new class of pulsing denialof-service (PDoS) attacks that could
seriously degrade the throughput of TCP flows. During a PDoS attack, periodic pulses of …

We propose using spectral analysis to identify normal TCP traffic so that it will not be
dropped or rate-limited in defense against denial of service (DoS) attacks. The approach can …

The distributed nature of the Internet makes it difficult for a single service provider to
troubleshoot the disruptions experienced by its customers. We propose NetDiagnoser, a …

We investigate statistical anomaly detection algorithms for detecting SYN flooding, which is
the most common type of Denial of Service (DoS) attack. The two algorithms considered are …