Figure 3From: How can sliding HyperLogLog and EWMA detect port scan attacks in IP traffic? Size of the total used memory (LFPM). Back to article page