@techreport{ietf-nmop-network-anomaly-architecture-05, number = {draft-ietf-nmop-network-anomaly-architecture-05}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-nmop-network-anomaly-architecture/05/}, author = {Thomas Graf and Wanting Du and Pierre Francois and Alex Huang Feng}, title = {{A Framework for a Network Anomaly Detection Architecture}}, pagetotal = 20, year = 2025, month = sep, day = 6, abstract = {This document describes the motivation and architecture of a Network Anomaly Detection Framework and the relationship to other documents describing network Symptom semantics and network incident lifecycle. The described architecture for detecting IP network service interruption is designed to be generic applicable and extensible. Different applications are described and examples are referenced with open-source running code.}, }