Anomaly prediction in network traffic using adaptive wiener filtering and arma modeling

Conference Proceedings - IEEE International Conference on Systems, Man and Cybernetics

Volumn , Issue , 2008, Pages 3548-3553

  Celenk, Mehmet ^a   Conley, Thomas ^a   Graham, James ^a   Willis, John ^a  

^a Ohio University   (United States)

Author keywords

Adaptive digital anomaly predictor; ARMA modeling; Majority voting; Network anomalies; Network security; Wiener filtering

Indexed keywords

ADAPTIVE DIGITAL ANOMALY PREDICTOR; ARMA MODELING; MAJORITY VOTING; NETWORK ANOMALIES; WIENER FILTERING;

ADAPTIVE FILTERING; CONTROL THEORY; CYBERNETICS; INTERNET; PORTS AND HARBORS; TRAFFIC SURVEYS;

NETWORK SECURITY;

EID: 69949112041     PISSN: 1062922X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICSMC.2008.4811848     Document Type: Conference Paper

References (19)

1. R. Kwitt and U. Hofmann, "Unsupervised anomaly detection in network traffic by means of robust PCA," Computing in the Global Information Technology, ICCGI 2007, March 2007, pp. 37-37.
2. G. Shen, et al. "Anomaly detection based on aggregated network behavior metrics," Proc. of Networks and Mobile Computing, Shanghai, China, Sept. 21-25, 2007, pp. 2210-2213.
3. A. Feldman, et al., "Data networks as cascades: Investigating the multifractal nature of Internet WAN traffic," Proc. of ACM/SIGCOMM 98, vol. 28, pp. 42-55, 1998.
4. W. Yurcik and Y. Li, "Internet security visualization case study: Instrumenting a network for NetFlow security visualization tools," in Proc. of ACSAC 05, 2005.
5. D. Plonka, "A network traffic flow reporting and visualization tool," in Proc. of the 14th USENIX Conference on System Administration, New Orleans, 2000, pp. 305-318.
6. K. Cho, et al., "An aggregation technique for traffic monitoring," in Proc. of SAINT, 2002, pp. 74-81.
7. C. Bullard, "Argus record format," June 2005
8. Y. Gong, "Detecting worms and abnormal activities with NetFlows," August 2004;
9. R. Pang, et al., "Characteristics of internet background radiation," in Proc. IMC'04, Oct. 25-27, 2004, Taormina, Sicily, Italy.
10. S. Jin, et al., "Network intrusion detection in covariance feature space," Pattern Recognition 40 (2007), 2185-2197.
11. A. Karasaridis, et al, "Wide-scale botnet detection and characterization," Proc. of the first conference on First Workshop on Hot Topics in Understanding Botnet, Cambridge, MA, 2007, pp. 7-7.
12. A. Sang and S. Li, "A predictability analysis of network traffic," in Proc. of INFOCAM 2000, vol. 1, pp. 342-351.
13. rd ed., Academic Press, 2006.
14. B. Porat, Digital Processing of Random Signals Theory & Methods, Prentice Hall, 1994.
15. P. Scalart and J.V. Filho, "Speech enhancement based on a priori signal to noise estimation," Proc. 1996 IEEE Int. Conf. on Acoustics, Speech, and Signal Processing, Vol. 2, 7-10May, 1996, pp. 629-632.
16. J. S. Lim, Two-Dimensional Signal and Image Processing, Prentice Hall, 1990.
17. W. L. Crum, "Tests for Serial Correlation in Regression Analysis Based on the Periodogram of Least-Squares Residuals," Journal of the American Statistical Association, Vol. 18, No. 143. (Sep., 1923), pp. 889-899.
18. J. Durbin, "The Resemblance Between the Ordinate of the Periodogram and the Correlation Coefficient," Biometrika, Vol. 56, No. 1. March 1969, pp. 1-15
19. V. Alarcon-Aquino and J.A. Barria, "Multiresolution FIR neural-network-based learning algorithm applied to network traffic prediction," IEET-SMC, Part C., Vol. 36, No. 2, pp. 208-220, March 2006