Profiling internet backbone traffic: behavior models and applications
Flash crowds and denial of service attacks: characterization and implications for CDNs and web sites