Figure 2From: How can sliding HyperLogLog and EWMA detect port scan attacks in IP traffic? Standard error on the estimation of the number of distinct destination ports. Back to article page