Detecting traffic anomalies through aggregate analysis of packet header data

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3042, Issue , 2004, Pages 1047-1059

  Kim, Seong Soo ^a   Narasimha Reddy, A L ^a   Vannucci, Marina ^b  

^a Department of Electrical Engineering ^*  (United States)

^b TEXAS A AND M UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DISCRETE WAVELET TRANSFORMS; WAVELET TRANSFORMS;

AGGREGATE ANALYSIS; ANOMALY DETECTION; CORRELATION DATA; NETWORK TRAFFIC; PACKET HEADER DATA; PORT NUMBERS; REAL TIME ANALYSIS; TRAFFIC ANOMALIES;

TELECOMMUNICATION TRAFFIC;

EID: 33845536096     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-24693-0_86     Document Type: Article

References (10)

1. Anu Ramanathan, "WADeS: A Tool for Distributed Denial of Service Attack Detection", TAMU-ECE-2002-02, Master of Science Thesis, August 2002.
2. National Laboratory for Applied Network Research (NLANR), measurement and operations analysis team, "NLANR network traffic packet header traces", accessed in August 2002.
3. P. Barford, J. Kline, D. Plonka and A. Ron, "A Signal Analysis of Network Traffic Anomalies," in Proc. of ACM SIGCOMM IMW, Marseille, France, November 2002.
4. th USENIX Security Symposium, Washington, D.C., USA, August 2001.
5. E. Kohler, J. Li, V. Paxson and S. Shenker, "Observed Structure of Addresses in IP Traffic, in Proc. of ACM SIGCOMM IMW, Marseille, France, November 2002.
6. Chen-Mou Cheng, H. T. Kung and Koan-Sin Tan, "Use of spectral analysis in defense against DoS attacks", in Proc. of IEEE Globecom, 2002.
7. KREONet2 (Korea Research Environment Open NETwork2), www.kreonet2.net
8. Seong Soo Kim, A. L. Narasimha Reddy and Marina Vannucci, "Detecting Traffic Anomalies using Discrete Wavelet Transform", in Proc. of ICOIN 2004, Busan, Korea, Feb2004
9. Anja Feldmann, Anna Gilbert, Polly Huang and Walter Willinger, "Dynamics of IP traffic: A study of the role of variability and the impact of control", Computer Communication Review, Vol. 29, No. 4 (Proc. of the ACM Sigcomm'99, Cambridge, MA), pp. 301-313, 1999.
10. CERT Coordination Center (CERT/CC), "CERT Advisory CA-2003-04 MS-SQL Server Worm", January 2003. http://www.cert.org/advisories/CA-2003-04.html