network traffic anomaly detection based on packet bytes .
Learning nonstationary models of normal network traffic for detecting novel attacks