Security of HyperLogLog (HLL) Cardinality Estimation: Vulnerabilities and Protection

Pedro Reviriego, Daniel Ting

Count distinct or cardinality estimates are widely used in network monitoring for security. They can be used, for example, to detect the malware spread, network scans, or a denial…