
440 Large Scale and Big Data
=−−
−
ipw
p
i
d
p
estimates tablepredictions
1
2
- –—
Pr
()
--table
p
(14.3)
traffic
p
⋈
IP
predictions table
p
RT AbuseDtct
p
-
--
−−−− −−−−−−−−−
→
())
abusive files
p
--log
(14.4)
Real-time logging, denoted RT-Log(p) in Equation 14.1, nalizes the trafc log-
les
p
as p + 1 starts. Next, the log-les
p
are consumed, among other input, by the
estimation process, Est(p), to produce the estimates-table
p
mapping IPs that issued
trafc during p to their estimated sizes (Equation 14.2). Next, the algorithm for pre-
dicting sizes, Prd(p + 2), consumes the estimates-tables from a sliding window of
length w periods,* p – w + 1 through p, to produce ...