Evaluation of an online parallel anomaly detection system

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2008, Pages 2040-2045

  Shanbhag, Shashank ^a   Wolf, Tilman ^a  

^a University of Massachusetts   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY-DETECTION ALGORITHMS; DETECTION ALGORITHM; HIGH DETECTION RATE; HIGH RATE; IN-NETWORK; MULTIPLE ALGORITHMS; PARALLEL ANOMALY DETECTION;

INTERNET; SIGNAL DETECTION;

PARALLEL ALGORITHMS;

EID: 67249166209     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2008.ECP.393     Document Type: Conference Paper

References (18)

1. T. Wolf, R. Ramaswamy, S. Bunga, and N. Yang, "An architecture for distributed real-time passive network measurement," in Proc. of 14th Annual Meeting of the IEEE/ACM International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems (MASCOTS), Monterey, CA, Sep. 2006, pp. 335-344.
2. T. Benzel, R. Braden, D. Kim, C. Neuman, A. Joseph, K. Sklower, R. Ostrenga, and S. Schwab, "Design, deployment, and use of the DETER testbed," in DETER: Proceedings of the DETER Community Workshop on Cyber Security Experimentation and Test on DETER Community Workshop on Cyber Security Experimentation and Test 2007, Boston, MA, 2007.
3. J. D. Brutlag, "Aberrant behavior detection in time series for network monitoring," in Proc. ofthe 14th Systems Administration Conference, New Orleans, LA, Dec. 2000, pp. 139-146.
4. A. Lakhina, M. Crovella, and C. Diot, "Characterization of network- wide anomalies in traffic flows," in IMC '04: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, Taormina, Italy, Oct. 2004, pp. 201-206.
5. V. A. Siris and F. Papagalou, "Application of anomaly detection algorithms for detecting SYN flooding attacks," in Proc. of IEEE Global Communications Conference (GLOBECOM), Dallas, TX, Nov. 2004, pp. 2050-2054.
6. P. Barford, J. Kline, D. Plonka, and A. Ron, "A signal analysis of network traffic anomalies," in Proc. of the 2nd ACM SIGCOMM Workshop on Internet Measurement (IMW), Marseille, France, Nov. 2002, pp. 71-82.
7. Y. Gu, A. McCallum, and D. Towsley, "Detecting anomalies in network traffic using maximum entropy estimation," in Proc. of the 5th ACM SIGCOMM Conference on Internet Measurement (IMC '05), Berkeley, CA, Oct. 2005.
8. N. Ye and Q. Chen, "An anomaly detection technique based on a chi-square statistic for detecting intrusions into information systems," Quality and Reliability Engineering International, vol. 17, no. 2, pp. 105-112, Mar. 2001.
9. A. Lazarevic, L. Ert(iz,V.Kumar,A.Ozgur,and J.Srivastava,"A comparative study of anomaly detection schemes in network intrusion detection," in Proc. of the Third SIAM International Conference on Data Mining, San Francisco, CA, May 2003.
10. C. Schwarzer, "Prediction and adaptation in a traffic-aware packet filtering method," Master's thesis, Ecole Polytechnique Federale de Lausanne (EPFL), Lausanne, Switzerland, Mar. 2006.
11. S. Deshpande, M. Thottan, T. K. Ho, and B. Sikdar, "A statistical approach to anomaly detection in interdomain routing," in Proc. of Third International Conferenc on Broadband Communications, Networks, and Systems (BROADNETS), San Jose, CA, Oct. 2006.
12. H. Wang, D. Xhang, and K. G. Shin, "Change-point monitoring for the detection of dos attacks," IEEE Transactions on Dependable Secure Computing, vol. 1, no. 4, pp. 193-208, Oct. 2004.
13. T. Wolf and S. Shanbhag, "Massively parallel anomaly detection system," University of Massachusetts, Amherst, MA, Tech. Rep. TR-08-CSE-08, Mar. 2008.
14. P. F. Evangelista, M. J. Embrechts, and B. K. Szymanski, "Data fusion for outlier detection through pseudo-ROC curves and rank distributions," in Proc. of International Joint Conference on Neural Networks (IJCNN), Vancouver, BC, Jul. 2006, pp. 2166-2173.
15. S. Schwab, B. Wilson, C. Ko, and A. Hussain, "SEER: a security experimentation environment for DETER," in DETER: Proceedings of the DETER Community Workshop on Cyber Security Experimentation and Test on DETER Community Workshop on Cyber Security Experimentation and Test 2007, Boston, MA, 2007.
16. J. Mirkovic, A. Hussain, B. Wilson, S. Fahmy, P. Reiher, R. Thomas, W.-M. Yao, and S. Schwab, "Towards user-centric metrics for denial-of- service measurement," in ExpCS '07: Proceedings ofthe 2007 Workshop on Experimental Computer Science, San Diego, CA, Jun. 2007.
17. T. Fawcett, "An introduction to ROC analysis," Pattern Recognition Letters, vol. 27, no. 8, pp. 861-874, Jun. 2006.
18. A. Dainotti, A. Pescape, and G. Ventre, "Wavelet-based detection of dos attacks," in Proc. of IEEE Global Communications Conference (GLOBECOM), San Francisco, CA, Nov. 2006.