Entropy based method for network anomaly Detection

2009 15th IEEE Pacific Rim International Symposium on Dependable Computing, PRDC 2009

Volumn , Issue , 2009, Pages 189-191

  Qian, Quan ^a   Che, Hong Yi ^a   Zhang, Rui ^a  

^a SHANGHAI UNIVERSITY   (China)

Author keywords

Network entropy; Network intrusion detection; Normalized relative network entropy

Indexed keywords

BACKGROUND KNOWLEDGE; ENTROPY METHODS; ENTROPY-BASED METHODS; IN-NETWORK; NETWORK ANOMALY DETECTION; NETWORK BEHAVIORS; NETWORK ENTROPY; NETWORK INTRUSION DETECTION; USER INTERVENTION;

ENTROPY; INTRUSION DETECTION;

NETWORK SECURITY;

EID: 77649326381     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PRDC.2009.38     Document Type: Conference Paper

References (6)

1. G. Nychis V. Sekar, D. G. Anderson, etc. "An Empirical Evaluation of Entropy-based Anomaly Detection" Proceedings of the 8th ACM SIGCOMM conference on Internet measurement,, ACM Press, 2008,pp151-156.
2. D.Brauckhoff, B. Tellenbach, A. Wagner, etc. "Impact of traffic sampling on anomaly detection metrics." Proceedings of the 6th ACM SIGCOMM conference on Internet measurement. ACM Press, 2006, pp159-164.
3. A.Lakhina, M. Crovella, and C. Diot. "Mining anomalies using traffic feature distributions". Proceedings of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications.ACM Press, 2005, pp217-218
4. Yu Gu, A.McCallum and D.Towsley. "Detecting Anomalies in Network Traffic Using Maximum Entropy Estimation" Tech. rep., Department of Computer Science, UMASS, Amherst, 2005. In https://www.usenix.org/events/imc05/ tech/full-papers/gu/gu.pdf
5. ZENG Qing-peng,WU Shui-xiu,WANG Ming-yan. Intrusion Detection Based on Entropy.Journal of Nanchang University (Natural Science), Vol.31(6), 2007, p619-621. (In Chinese)
6. A.Wagner, and B. Plattner. "Entropy Based Worm and Anomaly Detection in Fast IP Networks". 14th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprise, June, 2005.IEEE Press, pp172-177.