Distributed spatial anomaly detection

Proceedings - IEEE INFOCOM

Volumn , Issue , 2008, Pages 2378-2386

  Chhabra, Parminder ^a   Scott, Clayton ^c   Kolaczyk, Eric D ^b   Crovella, Mark ^a  

^a BOSTON UNIVERSITY   (United States)

^b Boston University   (United States)

^c UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DECISION MAKING; FINANCIAL DATA PROCESSING; PROBABILITY; PROBLEM SOLVING; ROUTERS; SIGNAL DETECTION;

ANOMALY DETECTION METHODS; NON-PARAMETRIC;

COMPUTER NETWORKS;

EID: 51349141856     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFOCOM.2007.232     Document Type: Conference Paper

References (18)

1. P. Barford, J. Kline, D. Plonka, and A. Ron. A signal analysis of network traffic anomalies. In Proceedings of ACM SIGCOMM Internet Measurement Workshop, Nov. 2002.
2. Y. Benjamini and Y. Hochberg. Controlling the false discovery rate: a practical and powerful approach to multiple testing. J. R. Statist. Soc B, 57(1):289-300, 1995.
3. J. D. Brutlag. Aberrant behavior detection in time series for network monitoring. In LISA, pages 139-146, 2000.
4. F. Feather, D. Siewiorek, and R. Maxion. Fault detection in an ethernet network using anomaly signature matching. In Proceedings of SIGCOMM '93, pages 279-288, 1993.
5. C. S. Hood and C. Ji. Proactive network fault detection. In INFOCOM (3), pages 1147-1155, 1997.
6. L. Huang, X. Nguyen, M. Garofalakis, M. I. Jordan, A. Joseph, and N. Taft. In-network pca and anomaly detection, In Advances in Neural Information Processing Systems 19, pages 617-624. MIT Press, Cambridge, MA, 2007.
7. J. Kilpi and I. Norros. Testing the gaussian approximation of aggregate traffic. In Proceedings Internet Measurement Workshop, 2002.
8. H. Kim and B. Karp. Autograph: toward automated, distributed worm signature detection. In SSYM'04: Proceedings of the 13th conference on USENIX Security Symposium, 2004.
9. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen. Sketch-based change detection: Methods, evaluation, and applications. In IMC '03: Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement, 2003.
10. A. Lakhina, M. Crovella, and C. Diot. Diagnosing network-wide traffic anomalies. In Proceedings of ACM SIGCOMM 2004, pages 219-230, Aug. 2004.
11. D. Moore, G. Voelker, and S. Savage. Inferring internet denial-of-service activity. In Proceedings of USENIX Security Symposium, Aug. 2001.
12. P. J. Rousseeuw and K. V. Driessen. A fast algorithm for the minimum covariance determinant estimator. Technometrics, 41:212-223, 1999.
13. S. Sarvotham, R. H. Riedi, and R. G. Baraniuk. Connection-level analysis and modeling of network traffic. In IMW '01: Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement, pages 99-103, 2001.
14. C. Scott and E. Kolaczyk. Nonparametric assessment of contamination in multivariate data using minimum-volume sets and FDR. Technical report. Univ. Michigan, 2007. Available at http://www.eecs.umich.edub~cscott/.
15. J. Storey. The positive false discovery rate: A Bayesian interpretation of the q-value. Annals of Statistics. 31:6:2013-2035, 2003.
16. X. Wang, S. Sarvotham, R. H. Riedi, and R. G. Baraniuk. Network traffic modeling using connection-level information. In Proceedings SPIE ITCom, August 2002.
17. V. Yegneswaran, P. Barford, and S. Jha. Global intrusion detection in the domino overlay system. In In Proceedings of NDSS, 2004.
18. Y. Zhang, Z. Ge, A. Greenberg, and M. Roughan. Network anomography. In IMC'05: Proceedings of the Internet Measurement Conference 2005 on Internet Measurement Conference, 2005.