An image processing approach to traffic anomaly detection

Proceedings of the 4th Asian Internet Engineering Conference, AINTEC 2008

Volumn , Issue , 2008, Pages 17-26

  Fontugne, Romain ^a   Hirotsu, Toshio ^b   Fukuda, Kensuke ^c  

^a GRADUATE UNIVERSITY FOR ADVANCED STUDIES   (Japan)

^b TOYOHASHI UNIVERSITY OF TECHNOLOGY   (Japan)

^c NATIONAL INSTITUTE OF INFORMATICS   (Japan)

Author keywords

Anomaly detection; Internet traffic; Pattern recognition

Indexed keywords

ANOMALOUS ACTIVITY; ANOMALY DETECTION; CLUSTERING TECHNIQUES; DARKNET; INTERNET TRAFFIC; MULTI-SCALE STRUCTURES; PACKET BEHAVIOR; PACKET TRAFFIC; TIME AND SPACE; TRADITIONAL TECHNIQUES; TRAFFIC ANOMALIES; TRAFFIC FEATURES;

ALGORITHMS; IMAGE PROCESSING; INTERNET;

EDGE DETECTION;

EID: 70349098688     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1503370.1503377     Document Type: Conference Paper

References (17)

1. P. Abry and D. Veitch. Wavelet analysis of long-range-dependent traffic. IEEE Transactions on Information Theory, 44(1):2-15, 1998.
2. P. Barford, J. Kline, D. Plonka, and A. Ron. A signal analysis of network traffic anomalies. IMW '02, pages 71-82, 2002.
3. K. Cho, K. Mitsuya, and A. Kato. Traffic data repository at the WIDE project. In USENIX 2000 Annual Technical Conference: FREENIX Track, pages 263-270, June 2000.
4. G. Dewaele, K. Fukuda, P. Borgnat, P. Abry, and K. Cho. Extracting hidden anomalies using sketch and non gaussian multiresolution statistical detection procedures. LSAD '07, pages 145-152, 2007.
5. R. O. Duda and P. E. Hart. Use of the hough transformation to detect lines and curves in pictures. Commun. ACM, 15(1):11-15, 1972.
6. S. Farraposo, P. Owezarski, and E. Monteiro. Nada - network anomaly detection algorithm. DSOM '07, 4785:191-194, 2007.
7. P. Hough. Method and means for recognizing complex patterns. U.S. Patent 3,069,654, 1962.
8. S. S. Kim and A. L. N. Reddy. Detecting traffic anomalies at the source through aggregate analysis of packet header data. Proc. of Networking 2004, pages 1047-1059, 2004.
9. S. S. Kim and A. L. N. Reddy. A study of analyzing network traffic as images in real-time. INFOCOM '05, pages 2056-2067, 2005.
10. Y. Kim, W. C. Lau, M. C. Chuah, and H. J. Chao. Packetscore: A statics-based packet filtering scheme against distributed denial-of-service attacks. IEEE Trans. on Dependable and Secure Computing, 3(2):141-155, 2006.
11. A. Kuzmanovic and E. W. Knightly. Low-rate tcp-targeted denial of service attacks: the shrew vs. the mice and elephants. SIGCOMM '03, pages 75-86, 2003.
12. A. Lakhina, M. Crovella, and C. Diot. Mining anomalies using traffic feature distributions. SIGCOMM '05, pages 217-228, 2005.
13. X. Li, F. Bian, M. Crovella, C. Diot, R. Govindan, G. Iannaccone, and A. Lakhina. Detection and identification of network anomalies using sketch subspaces. SIGCOMM '06, pages 147-152, 2006.
14. R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics of internet background radiation. IMC '04, pages 27-40, 2004.
15. V. Paxson. Bro: a system for detecting network intruders in real-time. Computer Networks, 31 (23-24):2435-2463, 1999.
16. M. Roesch. Snort - lightweight intrusion detection for networks. LISA '99: Proceedings of the 13th USENIX conference on System administration, pages 229-238, 1999.
17. Y. Zhang, Z. Ge, A. Greenberg, and M. Roughan. Network anomography. IMC '05, pages 1-14, 2005.