... observedmay take—this is what is mostly used in this paper, as in general.In the case of, if and only if, thus for , i.e., the observedvalues are uniformly distributed over. In this case,measures ... Minneapolis, in 2006.He joined network system group of Yahoo! Inc.,Sunnyvale, CA, in 2006. His current research liesin the modeling and analysis of network trafficand end-to-end performance in distributed ... PROFILING FOR NETWORK SECURITY MONITORING 1243TABLE IMULTIPLE LINKSUSED INOUR ANALYSISmeans that the observed values of are closer to being uni-formly distributed, thus less distinguishable...