Study of Stationary Load Increase of Computer-Network Traffic via Dynamic Principal-Component Analysis

Figure 2

Detection rate with different numbers of features used for detection under the 95% confidence level. The threshold is calculated using the 95th percentile of the empirical cumulative distribution of the extracted features.

(a) Detection rate (the estimate of 𝑑₁) for normal traffic using major PCs

(b) Detection rate (the estimate of 𝑑₁) for normal traffic using minor PCs

(c) Detection rate (the estimate of 𝑑₂) for the load increase of traffic using major PCs

(d) Detection rate (the estimate of 𝑑₂) for the load increase of traffic using minor PCs