The emergence of programmable switches offers a new opportunity to revisit ISP-scale
defenses for volumetric DDoS attacks. In theory, these can offer better cost vs. performance …

Sketching algorithms or sketches enable accurate network measurement results with low
resource footprints. While emerging programmable switches are an attractive target to get …

Data stream processing plays a critical role in providing fundamental statistics for various
applications, such as anomaly detection. Still, the unbalanced distribution of data streams …

Accurate and fast data stream mining is critical and fundamental to many tasks, including
time series database handling, big data management and machine learning. Different heavy …

Network traffic monitoring uses empirical entropy to detect anomalous events such as
various types of attacks. However, the exact computation of the entropy in high-speed …

Network measurement probes the underlying network to support upper-level decisions such
as network management, network update, network maintenance, network defense and …

Kernel density estimation method is a powerful tool and is widely used in many important
real-world applications such as anomaly detection and statistical learning. Unfortunately …

The empirical entropy is used in network traffic monitoring and classification to detect
anomalous events and manage network resources. Computing the entropy of high-speed …

In large data streams consisting of sequences of data items, those appearing over a long
period of time are regarded as persistent. Compared with frequent items, persistent items do …

In network measurement, data plane switches measure traffic and report events (eg, heavy
hitters) to the control plane via control channels. The control plane makes decisions to …