Accurate anomaly detection through parallelism

IEEE Network

Volumn 23, Issue 1, 2009, Pages 22-28

  Shanbhag, Shashank ^a   Wolf, Tilman ^b  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b University of Massachusetts   (United States)

Author keywords

Algorithm design and analysis; Classification algorithms; Detection algorithms; Layout; Monitoring; Prediction algorithms; Program processors

Indexed keywords

ALGORITHM DESIGN AND ANALYSIS; CLASSIFICATION ALGORITHMS; DETECTION ALGORITHMS; LAYOUT; PREDICTION ALGORITHMS;

AGGLOMERATION; INTERNET; PROGRAM PROCESSORS; SIGNAL DETECTION;

PARALLEL ALGORITHMS;

EID: 65249105995     PISSN: 08908044     EISSN: None     Source Type: Journal    
DOI: 10.1109/MNET.2009.4804320     Document Type: Article

References (16)

1. J. D. Brutlag, "Aberrant Behavior Detection in Time Series for Network Monitoring," Proc. 74th Sys. Admin. Conf., New Orleans, LA, Dec. 2000, pp. 139-46.
2. V. A. Siris and F. Papagalou, "Application of Anomaly Detection Algorithms for Detecting SYN Flooding Attacks," Proc. IEEE GLOBECOM Dallas, TX, Nov. 2004, pp. 2050-54.
3. C. Schwarzer, "Prediction and Adaptation in a Traffic-Aware Packet Filtering Method," Master's thesis, EPFL, Lausanne, Switzerland, Mar. 2006.
4. S. Deshpande et al., "A Statistical Approach to Anomaly Detection in Interdomain Routing," Proc. 3rd Int'l. Conf. Broadband Commun., Netw., and Sys. (BROADNETS), San Jose, CA, Oct. 2006.
5. H. Wang, D. Xhang, and K. G. Shin, "Change-Point Monitoring for the Detection of DoS Attacks," IEEE Trans. Dependable Secure Comp., vol. 1, no. 4, Oct. 2004, pp. 193-208.
6. P. Barford et al., "A Signal Analysis of Network Traffic Anomalies," Proc. 2nd ACM SIGCOMM Wksp. Internet Measurement, Marseille, France, Nov. 2002, pp. 71-82.
7. Y. Gu, A. McCallum, and D. Towsley, "Detecting Anomalies in Network Traffic Using Maximum Entropy Estimation," Proc. 5th ACM SIGCOMM Conf. Internet Measurement, Berkeley, CA, Oct. 2005.
8. T. Wolf et al., 'An Architecture for Distributed Real-Time Passive Network Measurement," Proc. 74th Annual Meeting IEEE/ACM Int'l. Symp. Modeling, Analysis, and Simulation Comp. and Telecommun. Sys., Monterey, CA, Sept. 2006, pp. 335-44.
9. S. Shanbhag and T. Wolf, "Massively Parallel Anomaly Detection in Online Network Measurement," Proc. 77th IEEE ICCCN, St. Thomas, U.S. Virgin Islands, Aug. 2008.
10. S. Shanbhag and T. Wolf, "Evaluation of an Online Parallel Anomaly Detection System," Proc. IEEE GLOBECOM, New Orleans, LA, Dec. 2008.
11. T. Wolf, "Challenges and Applications for Network-Processor-Based Programmable Routers," Proc. IEEE Sarnoff Symp., Princeton, NJ, Mar. 2006.
12. S. Bunga and T. Wolf, "A Characterization of High-Performance Network Monitoring Systems and Workloads," Proc. IEEE Wksp. High Perf. Switching and Routing, Brooklyn, NY, May 2007.
13. P. F. Evangelista, M. J. Embrechts, and B. K. Szymanski, "Data Fusion for Outlier Detection Through Pseudo-ROC Curves an Rank Distributions," Proc. Int'l. Joint Conf. Neural Net., Vancouver, BC, July 2006, pp. 2166-73.
14. A. Hussain, J. Heidemann, and C. Papadopoulos, "A Framework for Classifying Denial of Service Attacks," Proc. SIGCOMM '03, Karlsruhe, Germany, Aug. 2003, pp. 99-110.
15. D. Moore, C. Shannon, and J. Brown, 'Code-Red: A Case Study on the Spread and Victims of an Internet Worm," Proc. 2nd ACM SIGCOMM Wksp. Internet Measurement, Marseille, France, Nov. 2002, pp. 273-84.
16. R. P. Lippmarm et al., "Evaluating Intrusion Detection Systems: The 1998 DARPA Off-Line Intrusion Detection Evaluation," Proc. DARPA Info. Suryivability Conf. Expo., Hilton Head, SC, vol. 2, Jan. 2000, pp. 12-26.