Abstract: The main methods to detect anomaly network flow are through comparison between the system＇s actual action pattern and normal action pattern. There is a trade-off between real-time and veracity in anomaly network flow detection, this paper presents a new m

Key words: Flow detect, Anomaly detect, Measure coefficient