Usage of Modified Holt-Winters Method in the Anomaly Detection of Network Traffic: Case Studies

Figure 1

Sample fragment of series (308 observations, that is, 2.14 hours) ICMP in T3 network (from [6]) with daily thresholds and weekly thresholds for the scaling factor = 2.5.