Anomaly detection aiming pro-active management of computer network based on digital signature of network segment

Journal of Network and Systems Management

Volumn 15, Issue 2, 2007, Pages 267-283

  Zarpelão, Bruno Bogaz ^a   Mendes, Leonardo De Souza ^a   Proença Jr , Mario Lemes ^b  

^a UNIVERSITY OF CAMPINAS   (Brazil)

^b STATE UNIVERSITY OF LONDRINA   (Brazil)

Author keywords

Alarm correlation; MIB II (Management Information Base); BLGBA (Baseline for Automatic Backbone Management); SNMP (Simple Network Management Protocol)

Indexed keywords

DIGITAL SIGNATURE OF NETWORK SEGMENT (DSNS); FALSE ALARMS;

NETWORK ARCHITECTURE; NETWORK MANAGEMENT; NETWORK PROTOCOLS; PROBLEM SOLVING; SERVERS;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS;

EID: 34250755328     PISSN: 10647570     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10922-007-9064-y     Document Type: Article

References (19)

1. H. Hajji, Baselining Network Traffic and Online Faults Detection, IEEE International Conference on Communications, 2003 (ICC '03), vol. 1, pp. 301-308, 2003.
2. X. Qin, W. Lee, L. Lewis, and J. B. D. Cabrera, Integrating Intrusion Detection and Network Management, Network Operations and Management Symposium, 2002, pp. 329-344, 2002.
3. M. Thottan and C. Ji, Anomaly Detection in IP Networks, IEEE Transactions on Signal Processing, vol. 51, no. 8, pp. 2191-2204, 2003.
4. J. Jiang and S. Papavassiliou, Detecting Network Attacks in the Internet via Statistical Network Traffic Normally Prediction, Journal of Network and Systems Management, vol. 12, pp. 51-72, 2004.
5. A. Lakhina, M. Crovella, and C. Diot, Characterization of Network-Wide Traffic Anomalies in Traffic Flows, Proceedings of the 4th ACM SIGCOMM Internet Measurement Conference (IMC'04), pp. 201-206, 2004.
6. M. Roughan, T. Griffin, Z. M. Mao, A. Greenberg, and B. Freeman, IP Forwarding Anomalies and Improving their Detection Using Multiple Data Sources, Proceedings of the ACM SIGCOMM Workshop on Network Troubleshooting: Research, Theory and Operations Practice Meet Malfunctioning Reality, pp. 307-312, 2004.
7. A. Soule, K. Salamatian, and N. Taft, Combining Filtering and Statistical Methods for Anomaly Detection, Proceedings of the ACM SIGCOMM Internet Measurement Conference 2005 (IMC'05), pp. 331-344, 2005.
8. Y. Zhang, Z. Ge, A. Greenberg, and M. Roughan, Network Anomography, Proceedings of the ACM SIGCOMM Internet Measurement Conference 2005 (IMC'05), pp. 317-330, 2005.
9. P. Barford, J. Kline, D. Plonka, and A. Ron, A Signal Analysis of Network Traffic Anomalies, Proceedings of the ACM SIGCOMM Internet Measurement Workshop (IMW'02), pp. 71-82, 2002.
10. B. Krishnamurthy, S. Subhabrata, Z. Zhang, and Y. Chen, Sketch-based Change Detection: Methods, Evaluation and Applications, Proceedings of the 3rd ACM SIGCOMM Internet Measurement Conference (IMC'03), pp. 234-247, 2003.
11. C. C. Michael, Finding the Vocabulary of Program Behavior Data for Anomaly Detection, Proceedings of the DARPA Information Survivability Conference and Exposition (DISCEX'03), pp. 2-12, 2003.
12. N. Wu and J. Zhang, Factor Analysis Based Anomaly Detection, Proceedings of the 2003 IEEE Workshop on Information Assurance, pp. 108-115, 2003.
13. Z. M. U. Abusina, S. M. S. Zabir, A. Ashir, D. Chakraborty, T. Suganuma, and N. Shiratori, An Engineering Approach to Dynamic Prediction of Network Performance from Application Logs, International Journal of Network Management, vol. 15, pp. 151-162, 2005.
14. M. L. Proença Jr., C. Coppelmans, M. Bottoli, A. Alberti, and L. de Souza Mendes, The Hurst Parameter for Digital Signature of Network Segment, 11th International Conference on Telecommunications 2004 (ICT2004) Springer-Verlag in the LNCS series, pp. 772-781, 2004.
15. M. L. Proença Jr., C. Coppelmans, M. Bottoli, and L. de Souza Mendes, Baseline to Help With Network Management, ICETE 2004 - Proceedings of International Conference on E-business and Telecommunication Networks, 2004.
16. W. Stallings, SNMP, SNMPv2, SNMPv3, and RMON 1 and 2, 3, Addison-Wesley, 1998.
17. K. McCloghrie and M. Rose, Management Information Base for Network Management of TCP/IP-based internet: MIB-II, RFC 1213, 1991.
18. J. B. D. Cabrera, L. Lewis, X. Qin, W. Lee, R. K. Prasanth, B. Ravichandran, and R. K. Mehra, Proactive Detection of Distributed Denial of Service Attacks using MIB Traffic Variables - A Feasibility Study, 2001 IEEE/IFIP International Symposium on Integrated Network Management Proceedings, pp. 609-622, 2001.
19. J. Jung, B. Krishnamurthy, and M. Rabinovich, Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDN's and Web Sites, Proceedings of the Eleventh International Conference on World Wide Web, pp. 293-304, 2002.