Hacker News new | ask | show | jobs
by siddharthbhatia 2326 days ago
In Figure 7 of the paper, we show an example of detection when neither edge/source/destination is individually anomalous but as a whole, it is a microcluster anomaly. It can similarly be detected when there are multiple web-hosting servers.