Figure 10From: How can sliding HyperLogLog and EWMA detect port scan attacks in IP traffic? The EWMA control chart with a new learning step and an additional update constraint, λ= 0 . 1. Back to article page