Patent ID: 7437397

Claim:
A method comprising a plurality of activities, comprising: automatically: receiving a plurality of elements for each of a plurality of continuous data streams; treating the plurality of elements as a first data stream matrix that defines a first dimensionality; reducing the first dimensionality of the first data stream matrix to obtain a second data stream matrix, the second data stream matrix comprising a plurality of sampled values of the first data stream matrix; randomly computing a singular value decomposition of the second data stream matrix, a probability of computation determinable based upon a ratio of a magnitude of a sum of sampled values obtained since a prior computation of the singular value decomposition to a calculated product of a determined separating value of eigenvalues and a determined eigenvalue of the second data stream matrix; and based on the singular value decomposition of the second data stream matrix, quantifying approximate linear correlations between the plurality of elements, the approximate linear correlations between the plurality of elements usable to automatically identify and automatically report a denial of service attack without address spoofing.