Cabuk discusses early eorts toward

Cabuk discusses early eorts towards developing regularity-
based tests in [4] by examining variance patterns in a set of
observed inter-packet delays. This method is implemented
by separating inter-packet delays from observed trac into
windows" of size w. Then, for each window i, the standard
deviation i is computed. Next, the dierence between each
pair of windows (i; j) is computed. Finally, the standard de-
viation of all dierences is computed to obtain a summary
statistic. This can be expressed in the formula:
regularity = STDEV (
ji