CySight netflow analyzer provides comprehensive Standard Deviation analysis (aka Outlier detection) which enables the ability to analyze traffic patterns to quickly identify what aspects have changed the most in a specific period. For example knowing what application has changed the most in the last 2 hours can lead to early detection of issues. Identify Worms, increasing flows or data floods.
Good examples of this can be seen in the Outliers Analysis or in the Network Behavior Anomaly Alerts.
Another example of Standard Deviation can be seen in the CySight analyzer packet size analysis by application
which sorted by standard deviation descending.