A study on detecting network anomalies using sampled flow statistics

SAINT - 2007 International Symposium on Applications and the Internet - Workshops, SAINT-W

Volumn , Issue , 2007, Pages

  Kawahara, Ryoichi ^a   Mori, Tatsuya ^a   Kamiyama, Noriaki ^a   Harada, Shigeaki ^a   Asano, Shoichiro ^b  

^a NTT CORPORATION   (Japan)

^b NATIONAL INSTITUTE OF INFORMATICS   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

FINANCIAL DATA PROCESSING; INTERNET; STATISTICAL METHODS; STATISTICS;

DETECTABILITY; FLOW STATISTICS; INDIVIDUAL (PSS 544-7); INTERNATIONAL SYMPOSIUM; NETWORK ANOMALIES; NETWORK MEASUREMENTS; NORMAL FLOWS; PACKET SAMPLING; PARTITIONING METHODS;

ADMINISTRATIVE DATA PROCESSING;

EID: 46349085574     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAINT-W.2007.17     Document Type: Conference Paper

References (10)

1. C. Estan and G. Varghese, "New Directions in Traffic Measurement and Accounting," ACM SIGCOMM 2002.
2. N. Duffield, C. Lund, and M. Thorup, "Properties and Prediction of Flow Statistics from Sampled Packet Streams," ACM SIGCOMM IMW 2002.
3. N. Duffield, C. Lund, and M. Thorup, "Estimating Flow Distributions from Sampled Flow Statistics," ACM SIGCOMM, pp. 325-336, 2003.
4. T. Mori et al., "Identifying elephant flows through periodically sampled packets," ACM SIGCOMMIMC 2004.
5. http:/www.cisco.com/warp/public/732/Tech/nmp/netflow/index.shunl
6. InMon sFlow Probe, http://www.inmon.com/products/probes.php
7. A. Lakhina, M. Crovella, and C. Diot. "Mining Anomalies Using Traffic Feature Distributions," ACM SIGCOMM 2005.
8. "Science Information Network (SINET)," http://www.sinet.ad.jp/ english/
9. A. Gunnar, M. Johansson, and T. Telkamp, "Traffic matrix estimation on a large IP backbone - A comparison on real data," ACM SIGCOMMIMC 2004.
10. T. Mori et al., "Inferring original traffic pattern from sampled flow statistics," submitted to IEEE SAINT 2007.