A novel sliding window based change detection algorithm for asymmetric traffic

Proceedings - 2008 IFIP International Conference on Network and Parallel Computing, NPC 2008

Volumn , Issue , 2008, Pages 168-175

  Ahmed, Ejaz ^a   Clark, Andrew ^a   Mohay, George ^a  

^a QUEENSLAND UNIVERSITY OF TECHNOLOGY   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

ADAPTIVE ALGORITHMS; ALARM SYSTEMS; COMPUTER CRIME; DECODING; ERRORS; INTERNET; PARALLEL PROCESSING SYSTEMS; PUBLIC WORKS; SIGNAL DETECTION; TELECOMMUNICATION NETWORKS; WINDOWS;

ABRUPT CHANGES; ASYMMETRIC NETWORKS; ASYMMETRIC TRAFFICS; AUTOMATIC ADJUSTMENTS; CHANGE DETECTIONS; COMPARATIVE ANALYSIS; CUMULATIVE SUMS; DARKNET; DETECTION ACCURACIES; FALSE ALARM RATES; NETWORK ATTACKS; NETWORK OPERATIONS; NETWORK TRAFFICS; REAL NETWORKS; SEQUENTIAL ANALYSES; SIMULATED DATUMS; SLIDING WINDOW BASED; SUPERIOR PERFORMANCES;

METROPOLITAN AREA NETWORKS;

EID: 57949107783     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NPC.2008.81     Document Type: Conference Paper

References (17)

1. M. Bailey, E. Cooke, F. Jahanian, A. Myrick, and S. Sinha. Practical darknet measurement. 40th Annual Conference on-Information Sciences and Systems, pages 1496-1501, March 2006.
2. M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D.Watson. The Internet Motion Sensor: A distributed blackhole monitoring system. In Proceedings of Network and Distributed System Security Symposium NDSS, San Diego, CA, February 2005.
3. M. Basseville and I. Nikiforov. Detection of abrupt changes: theory and application. Englewood Cliffs, NJ: Prentice Hall, 1993.
4. C. Bo, B.-X. Fang, and X.-C. Yun. A new approach for early detection of internet worms based on connection degree. Proceedings of International Conference on Machine Learning and Cybernetics, 4:2424-2430 Vol. 4, Aug. 2005.
5. J. Chan, C. Leckie, and T. Peng. Hitlist Worm Detection using Source IP Address History. Proceedings of Australian Telecommunication Networks and Applications Conference, 2006.
6. W. Chen and D. Yeung. Defending Against TCP SYN Flooding Attacks Under Different Types of IP Spoofing. Proceedings of the International Conference on Networking, International Conference on Systems and International Conference on Mobile Communications and Learning Technologies (ICNICONSMCL'06)-Volume 00, 2006.
7. Y. Chen, K. Hwang, and W.-S. Ku. Collaborative detection of ddos attacks over multiple network domains. IEEE Transactions on Parallel and Distributed Systems, 18(12):1649-1662, Dec. 2007.
8. E. Cooke, M. Bailey, Z. M. Mao, D. Watson, F. Jahanian, and D.McPherson. Toward understanding distributed blackhole placement. In Proceedings of the ACM workshop on Rapid malcode, WORM, pages 54-64, New York, NY, USA, 2004. ACM.
9. E. Cooke, Z. Mao, and F. Jahanian. Hotspots: The root causes of non-uniformity in self-propagating malware. International Conference on Dependable Systems and Networks, DSN, pages 179-188, 2006.
10. X. Jiang and D. Xu. Collapsar: a vm-based architecture for network attack detention center. In Proceedings of the 13th conference on USENIX Security Symposium, SSYM, pages 2-2, Berkeley, CA, USA, 2004. USENIX Association.
11. J. Jung, V. Paxson, A. Berger, and H. Balakrishnan. Fast portscan detection using sequential hypothesis testing. Proceedings of IEEE Symposium on Security and Privacy, pages 211-225, May 2004.
12. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. Inside the Slammer Worm. IEEE Security & Privacy Magazine, 1(4):33-39, 2003.
13. V. Siris and F. Papagalou. Application of anomaly detection algorithms for detecting SYN flooding attacks. Computer Communications, 29(9):1433-1442, 2006.
14. N. Vanderavero, X. Brouckaert, O. Bonaventure, and B. Le Charlier. The HoneyTank: a scalable approach to collect malicious internet traffic. International Journal of Critical Infrastructures, 4(1):185-205, 2008.
15. D. Voelker and S. Savage. Inferring Internet Denial-of-Service Activity. Proceedings of the USENIX Security Symposium, pages 9-22, 2001.
16. H.Wang, D. Zhang, and K. G. Shin. Change-Point Monitoring for the Detection of DoS Attacks. IEEE Transactions on Dependable and Secure Computing, 1(4):193-208, 2004.
17. G. White, E. Fisch, and U. Pooch. Computer System and Network Security. CRC Press, 1995.