Approach Overview

• For every destination address router keeps lightweight statistics (number of packets/bytes, timing).

• The statistics are used along with built-in models to characterize “normal” traffic.

Previous slide

Next slide

Back to first slide

View graphic version