Beyond shannon: Characterizing internet traffic with generalized entropy metrics

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5448, Issue , 2009, Pages 239-248

  Tellenbach, Bernhard ^a   Burkhart, Martin ^a   Sornette, Didier ^a   Maillart, Thomas ^a  

^a ETH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; DATA POINTS; FEATURE DISTRIBUTION; GENERALIZED ENTROPIES; INTERNET TRAFFIC; NETWORK ANOMALIES; NETWORK ANOMALY DETECTION; SHANNON ENTROPY; TRAFFIC FEATURES; TRAFFIC TRACES;

ACTIVE NETWORKS; ASSOCIATIVE STORAGE; INTERNET SERVICE PROVIDERS; PNEUMATIC DRIVES; PULSE AMPLITUDE MODULATION;

ENTROPY;

EID: 67649977471     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-00975-4_24     Document Type: Conference Paper

References (19)

1. Barford, P., Kline, J., Plonka, D., Ron, A.: A signal analysis of network traffic anomalies. In: IMW 2002: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment, pp. 71-82. ACM, New York (2002)
2. Scherrer, A., Larrieu, N., Owezarski, P., Borgnat, P., Abry, P.: Non-gaussian and long memory statistical characterizations for internet traffic with anomalies. IEEE Transactions on Dependable and Secure Computing 4(1), 56-70 (2007) (Pubitemid 46384621)
3. Dubendorfer, T., Plattner, B.: Host behaviour based early detection of worm outbreaks in internet backbones. In: 14th IEEEWET ICE, pp. 166-171 (2005) (Pubitemid 46090869)
4. Cisco Systems Inc.: Netflow services solutions guide, http://www.cisco.com
5. Quittek, J., Zseby, T., Claise, B., Zander, S.: Rfc 3917: Requirements for ip flow information export (ipfix) (October 2004)
6. Wagner, A., Plattner, B.: Entropy based worm and anomaly detection in fast ip networks. In: 14th IEEE WET ICE, Link̈oping, Sweden (June 2005)
7. Lakhina, A., Crovella, M., Diot, C.: Diagnosing network-wide traffic anomalies. In: ACM SIGCOMM, Portland (August 2004)
8. Li, X., Bian, F., Crovella,M., Diot, C., Govindan, R., Iannaccone, G., Lakhina, A.: Detection and identification of network anomalies using sketch subspaces. In: Internet Measurement Conference (IMC), Rio de Janeriro, Brazil, pp. 147-152. ACM, New York (2006) (Pubitemid 47165596)
9. Ziviani, A., Monsores, M.L., Rodrigues, P.S.S., Gomes, A.T.A.: Network anomaly detection using nonextensive entropy. IEEE Communications Letters 11(12) (2007)
10. Shannon, C.: Prediction and entropy of printed english. Bell System Tech. Jour. (January 1951)
11. Tsallis, C.: Possible generalization of boltzmann-gibbs statistics. J. Stat. Phys. 52 (1988)
12. Tsallis, C.: Nonextensive statistics: theoretical, experimental and computational evidences and connections. Brazilian Journal of Physics (January 1999)
13. Tsallis, C.: Entropic nonextensivity: a possible measure of complexity. Chaos (January 2002)
14. Dauxois, T.: Non-gaussian distributions under scrutiny. J. Stat. Mech. (January 2007)
15. Wilk, G.,Wlodarczyk, Z.: Example of a possible interpretation of tsallis entropy. arXiv condmat. stat-mech (November 2007)
16. Willinger, W., Paxson, V., Taqqu, M.S.: Self-similarity and heavy tails: Structural modeling of network traffic. In: Statistical Techniques and Applications (1998)
17. Kohler, E., Li, J., Paxson, V., Shenker, S.: Observed structure of addresses in ip traffic. In: Proceedings of the SIGCOMM Internet Measurement Workshop, pp. 253-266. ACM, New York (2002) (Pubitemid 46432427)
18. SWITCH: The swiss education and research network, http://www.switch.ch
19. Gu, Y., McCallum, A., Towsley, D.: Detecting anomalies in network traffic using maximum entropy estimation. In: IMC 2005, pp. 1-6. ACM, New York (2005)