NETWORK BANDWIDTH ANOMALY DETECTOR APPARATUS AND METHOD FOR DETECTING NETWORK ATTACKS USING CORRELATION FUNCTION

摘要

A method and system of detecting bandwidth anomalies in a data communication system involves receiving a first traffic waveform representing a time distribution of data volume in a first direction in said data communication system in a first period of time, producing a correlation value representing a correlation of said first traffic waveform with a reference waveform; and producing a denial of service attack signal when said correlation value satisfies a criterion and apparatus thereof.