Network-Wide Traffic Anomaly Detection and Localization Based on Robust Multivariate Probabilistic Calibration Model

Table 4

Anomaly injection.

Type	Injection method
DoS/DDoS	Increasing the volume of single/multiple OD flows gradually
ALPHA	Promptly increasing the volume of a single OD flow
Ingress/egress shift	Reducing a portion of volume of a certain OD flow which then added to another OD flow
Flash crowd	Increasing the volume of multiple OD flows rapidly and then tuning them back to normal gradually