HIDDEN: Hausdorff distance based intrusion detection approach DEdicated to networks

Proceedings - The 3rd International Conference on Internet Monitoring and Protection, ICIMP 2008

Volumn , Issue , 2008, Pages 11-16

  Labit, Yann ^a   Mazel, Johan ^a  

^a UNIVERSITÉ DE TOULOUSE   (France)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; ELECTRIC BREAKDOWN; INTERNET; INTERNET PROTOCOLS; PROBABILITY; RISK ASSESSMENT; SIGNAL DETECTION; TIME SERIES ANALYSIS;

ACTIVE MEASUREMENTS; ATTACK DETECTION; DETECTION METHODS; DOS ATTACKS; ENTROPY FUNCTIONS; FALSE POSITIVES; HAUSDORFF DISTANCE; INTERNATIONAL CONFERENCES; INTERNET MONITORING; INTRUSION DETECTION APPROACH; PASSIVE MONITORING; REAL-TIME DETECTION; TCP/UDP; TIME-SERIES;

INTRUSION DETECTION;

EID: 51849157436     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICIMP.2008.17     Document Type: Conference Paper

References (15)

1. T. Bedford. Hausdorff dimension and box dimension in self-similar sets, pages 17-26, 1988.
2. P. Borgnat, N. Larrieu, P. Owezarski, P. Abry, J. Aussibal, L. Gallon, G. Dewaele, K. Boudaoud, L. Bernaille, A. Scherrer, Y. Zhang, and Y. Labit. Detection d attaques de deni de service par un modele non gaussien multiresolution. In Colloque Francophone d Ingenierie des Protocoles (CFIP 2006), 2006.
3. D. Chakraborty, A. Ashir, T. Suganuma, G. M. Keeni, T. K. Roy, and N. Shiratori. Self-similar and fractal nature of internet traffic. Int. J. Netw. Manag., 14(2): 119-129, 2004.
4. G. K. D.P. Huttenlocher and W. Ruchlidge. Comparing images using the hausdorff distance. In IEEE Transaction on Pattern Analysis and Machine Intelligence, volume 15(9), pages 850-863, 1993.
5. M. Dubuisson and A. Jain. A modified hausdorff distance for object matching. In Proceedings of 12th International Conference on Pattern Recognition, pages 566-568, 1994.
6. Y. Gu, A. McCallum, and D. Towsley. Detecting anomalies in network traffic using maximum entropy estimation. In IM'2005, pages 345-350, Berkeley, CA, USA, October 19-21, 2005.
7. Y.-J. Z. H. Tan. A novel weighted hausdorff distance for face localization. In Image and Vision Computing, volume 24 (Issue 7, pages 656-662, 2006.
8. A. Hussain, J. Heidemann, and C. Papadopoulos. A frame-work for classifying denial of service attacks. In SIGCOMM'03, pages 99-110, Karlsruhe, Germany, August 25-29, 2003.
9. W. W. M. S. Taqqu, V. Teverovsky. Is network traffic self-similar or multifractal? In Fractals, volume 5:63, 1997.
10. MetroSec. http://www.laas.fr/METROSEC.
11. R. Prasad, C. Dovrolis, M. Murray, and K. Claffy. Bandwidth estimation: metrics, measurement techniques, and tools. IEEE Network, pages 27-35, 2003.
12. A. Scherrer, N. Larrieu, P. Owezarski, P. Borgnat, and P. Abry. Non gaussian and long memory statistical characterization of internet traffic with anomalies. In IEEE Transaction on Dependable and Secure Computing, volume 4 (1), pages 56-70, 2007.
13. B. Takacs. Comparing face images using the modified hausdorff distance. In Pattern Recognition, volume 31 (12), pages 1873-1880, 1998.
14. TFN2k. http://packetstormsecurity.org/distributed/TFN2kAnalysis-1.3.txt.
15. W. W. W. E. Leland, M. S. Taqqu and D. V. Wilson. On the self-similar nature of ethernet traffic. In IEEE/ACM Transactions on Networking, pages 1-15, Feb, 1994.