Correlations Between Quiescent Ports in Network Flows (Presentation)

• Presentation
In this presentation, the authors discuss using FloVis to perform network data analysis.
Publisher

Software Engineering Institute

Abstract

In this presentation, given at FloCon 2005, the authors introduce a method for detecting the onset of anomalous port-specific activity by recognizing deviation from correlated activity.

This content was created for a conference series or symposium and does not necessarily reflect the positions and views of the Software Engineering Institute.