Constant Time Updates in Hierarchical Heavy Hitters

Ran Ben Basat, Gil Einziger, Roy Friedman +2

Monitoring tasks, such as anomaly and DDoS detection, require identifying frequent flow aggregates based on common IP prefixes. These are known as \emph{hierarchical heavy hitters}…