Characteristics of network traffic flow anomalies

Flash crowds and denial of service attacks: characterization and implications for CDNs and web sites

Proceedings of the 11th international conference on World Wide Web

A signal analysis of network traffic anomalies

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment

Experiences with worm propagation simulations

Proceedings of the 2003 ACM workshop on Rapid malcode

Sketch-based change detection: methods, evaluation, and applications

Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement

Towards multisensor data fusion for DoS detection

Proceedings of the 2004 ACM symposium on Applied computing

Accurate, scalable in-network identification of p2p traffic using application signatures

Proceedings of the 13th international conference on World Wide Web

Understanding web server configuration issues

Software—Practice & Experience - Special issue: Web technologies

Online identification of hierarchical heavy hitters: algorithms, evaluation, and applications

Proceedings of the 4th ACM SIGCOMM conference on Internet measurement

Class-of-service mapping for QoS: a statistical signature-based approach to IP traffic classification

Proceedings of the 4th ACM SIGCOMM conference on Internet measurement

Flash crowd mitigation via adaptive admission control based on application-level observations

ACM Transactions on Internet Technology (TOIT)

A cross-correlation-based method for spatial-temporal traffic analysis

Performance Evaluation - Long range dependence and heavy tail distributions

Monitoring the Macroscopic Effect of DDoS Flooding Attacks

IEEE Transactions on Dependable and Secure Computing

FCAN: Flash Crowds Alleviation Network

Proceedings of the 2006 ACM symposium on Applied computing

Application of a network dynamics analysis tool to mobile ad hoc networks

Proceedings of the 9th ACM international symposium on Modeling analysis and simulation of wireless and mobile systems

One step ahead to multisensor data fusion for DDoS detection

Journal of Computer Security - Special issue on security track at ACM symposium on applied computing 2004

Is sampled data sufficient for anomaly detection?

Proceedings of the 6th ACM SIGCOMM conference on Internet measurement

Combining filtering and statistical methods for anomaly detection

IMC '05 Proceedings of the 5th ACM SIGCOMM conference on Internet Measurement

Passive measurement of one-way and two-way flow lifetimes

ACM SIGCOMM Computer Communication Review

Challenging the anomaly detection paradigm: a provocative discussion

NSPW '06 Proceedings of the 2006 workshop on New security paradigms

Traffic flooding attack detection with SNMP MIB using SVM

Computer Communications

Anomaly Detection of Hostile Traffic Based on Network Traffic Distributions

Information Networking. Towards Ubiquitous Networking and Services

Information fusion for computer security: State of the art and open issues

Information Fusion

A modeling framework of content pollution in Peer-to-Peer video streaming systems

Computer Networks: The International Journal of Computer and Telecommunications Networking

Addressing the attack attribution problem using knowledge discovery and multi-criteria fuzzy decision-making

Proceedings of the ACM SIGKDD Workshop on CyberSecurity and Intelligence Informatics

Network anomaly detection and classification via opportunistic sampling

IEEE Network: The Magazine of Global Internetworking - Special issue title on recent developments in network intrusion detection

Model and algorithm of tencent's voice service identification based on SAT: session association technology

WiCOM'09 Proceedings of the 5th International Conference on Wireless communications, networking and mobile computing

Baseline traffic modeling for anomalous traffic detection on network transit points

APNOMS'09 Proceedings of the 12th Asia-Pacific network operations and management conference on Management enabling the future internet for changing business and new computing services

A visualization tool for situational awareness of tactical and strategic security events on large and complex computer networks

MILCOM'03 Proceedings of the 2003 IEEE conference on Military communications - Volume II

Going viral: flash crowds in an open CDN

Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference

Anomaly detection of excessive network traffic based on ratio and volume analysis

ISI'06 Proceedings of the 4th IEEE international conference on Intelligence and Security Informatics

Traffic anomaly detection and characterization in the tunisian national university network

NETWORKING'06 Proceedings of the 5th international IFIP-TC6 conference on Networking Technologies, Services, and Protocols; Performance of Computer and Communication Networks; Mobile and Wireless Communications Systems

Network intrusion detection using wavelet analysis

CIT'04 Proceedings of the 7th international conference on Intelligent Information Technology

Computer network monitoring and abnormal event detection using graph matching and multidimensional scaling

ICDM'06 Proceedings of the 6th Industrial Conference on Data Mining conference on Advances in Data Mining: applications in Medicine, Web Mining, Marketing, Image and Signal Mining

Anomaly detection methods in wired networks: a survey and taxonomy

Computer Communications

Measurement and modeling of paging channel overloads on a cellular network

Computer Networks: The International Journal of Computer and Telecommunications Networking