Anomaly detection based on aggregated network behavior metrics

2007 International Conference on Wireless Communications, Networking and Mobile Computing, WiCOM 2007

Volumn , Issue , 2007, Pages 2210-2213

  Shen, Gang ^a   Chen, Dalong ^a   Qin, Zhongping ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Anomaly detection; Data reduction; Network metrics

Indexed keywords

DATA REDUCTION; INFORMATION ANALYSIS; SENSITIVITY ANALYSIS; STATISTICAL MECHANICS;

ANOMALY DETECTION; DETECTION SYSTEMS; NETWORK METRICS; PACKET HEADER INFORMATION;

NETWORK MANAGEMENT;

EID: 38049077367     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WICOM.2007.551     Document Type: Conference Paper

References (7)

1. A, Lakhina, M. Crovella, and C. Diot, "Characterization of Network-Wide Anomalies in Traffic Flows", in Proceedings of the ACM SIGCOMM conference on Internet measurement, Sicily, Italy, 2004, pp201-206.
2. D. Brauckhoff, B. Tellenbach, A. Wagner et al, "Impact of Packet Sampling on Anomaly Detection Metrics", in Proceedings of the ACM SIGCOMM conference on Internet measurement, Rio de Janeriro, Brazil, 2006, pp159-164.
3. T. Johnson, S. Muthukrishnan, and I. Rozenbaum, "Sampling Algorithms in a Stream Operator", in Proceedings of the 2005 ACM SIGMOD international conference on Management of data, Baltimore, Maryland, 2005, pp1-12.
4. S. Jin, D.S. Yeung, "A Covariance Analysis Model for DDoS Attack Detection", in Proceedings of IEEE International Conference on Communications, Paris, France, 2004, pp1882-1886.
5. Y. Gu, A. McCallum, and D. Towsley, "Detecting Anomalies in Network Traffic Using Maximum Entropy Estimation", in Proceedings of the ACM SIGCOMM conference on Internet measurement, Berkeley, California, 2005, pp345-350.
6. C. Siaterlis, B. Maglaris, "Detecting DDoS attacks with passive measurement based heuristics", in Proceedings of the Ninth International Symposium on Computers and Communications, 2004, pp339-344.
7. W.E. Leland, M.S. Taqq, W. Willinger et al, "On the self-similar nature of Ethernet traffic", ACM SIGCOMM, San Francisco, California, 1993, pp183-193.