Figure 9From: How can sliding HyperLogLog and EWMA detect port scan attacks in IP traffic? The EWMA control chart with a new learning step and an additional update constraint, λ= 0 . 3. Back to article page