Statistical and probabilistic analysis of interarrival and waiting times of Internet2 anomalies

Piotr Kokoszka, Hieu Nguyen, Haonan Wang, Liuqing Yang

Research output: Contribution to journalArticlepeer-review

4 Scopus citations


Motivated by the need to introduce design improvements to the Internet network to make it robust to high traffic volume anomalies, we analyze statistical properties of the time separation between arrivals of consecutive anomalies in the Internet2 network. Using several statistical techniques, we demonstrate that for all unidirectional links in Internet2, these interarrival times have distributions whose tail probabilities decay like a power law. These heavy-tailed distributions have varying tail indexes, which in some cases imply infinite variance. We establish that the interarrival times can be modeled as independent and identically distributed random variables, and propose a model for their distribution. These findings allow us to use the tools of of renewal theory, which in turn allows us to estimate the distribution of the waiting time for the arrival of the next anomaly. We show that the waiting time is stochastically substantially longer than the time between the arrivals, and may in some cases have infinite expected value. All our findings are tabulated and displayed in the form of suitable graphs, including the relevant density estimates.

Original languageEnglish (US)
Pages (from-to)727-744
Number of pages18
JournalStatistical Methods and Applications
Issue number4
StatePublished - Dec 2020

Bibliographical note

Funding Information:
This research has been partially supported by NSF grants DMS?1737795, DMS 1923142 and CNS 1932413. We thank Professor Anura P. Jayasumana of the CSU?s Department of Electrical and Computer Engineering for sharing the Internet2 anomalies data.

Publisher Copyright:
© 2019, Springer-Verlag GmbH Germany, part of Springer Nature.


  • Heavy-tailed distributions
  • Interarrival times
  • Internet anomalies
  • Renewal theory


Dive into the research topics of 'Statistical and probabilistic analysis of interarrival and waiting times of Internet2 anomalies'. Together they form a unique fingerprint.

Cite this