Explanation: Window Size

Window size does NOT matter. Correlation still exists at even a very small window. HOWEVER, the strength of the correlation varies and is slightly smaller but still very significant. The correlation may drop to .6, but that is still a very strong correlation. This means that the window size does not matter.

This may very well explain why we see smaller correlation values in smaller data sets as compared to CMU and GA Tech.

Maybe there are anomalies which disrupt the correlation strength.

2 Hour Sliding Window -- CMU'05

NOTE THE Y-AXIS VARIES

http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window120_daddr_dport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window120_daddr_saddr.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window120_daddr_sport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window120_dport_sport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window120_saddr_dport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window120_saddr_sport.jpg

1 Hour Sliding Window -- CMU'05

http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window60_daddr_dport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window60_daddr_saddr.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window60_daddr_sport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window60_dport_sport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window60_saddr_dport.jpg http://cyprus.cmcl.cs.cmu.edu/tmp/entropy_graphs/window60_saddr_sport.jpg