Benford's law behavior of Internet traffic
A classification framework for anomaly detection