A flow based anomaly detection system using chi-square technique

2010 IEEE 2nd International Advance Computing Conference, IACC 2010

Volumn , Issue , 2010, Pages 285-289

  Muraleedharan, N ^a   Parmar, Arun ^a   Kumar, Manish ^a  

^a CENTRE FOR DEVELOPMENT OF ADVANCED COMPUTING   (India)

Author keywords

Anomaly detection; Chi square; Flow; Scan detection

Indexed keywords

ANOMALOUS ACTIVITY; ANOMALY DETECTION; ANOMALY DETECTION SYSTEMS; BEHAVIOR ANALYSIS; DETECTION MECHANISM; FLOW BASED; HIGH DETECTION RATE; INITIAL STAGES; INTRUSION DETECTION SYSTEMS; IP FLOW; MALICIOUS TRAFFIC; NETWORK TRAFFIC; PREVENTIVE ACTION; SECURITY MECHANISM;

COMPUTER CRIME; NETWORK SECURITY;

INTRUSION DETECTION;

EID: 77951151839     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IADCC.2010.5422996     Document Type: Conference Paper

References (22)

1. D.E. Denning. An intrusion detection model, IEEE Transaction on Software Engineering, SE-13, 1987, 222-232
2. J. Clerk Maxwell, A Treatise on Electricity and Magnetism, 3rd ed., vol.2. Oxford: Clarendon, 1892, pp.68-73.
3. Firewall/IDS Evasion and spoofing, Nmap Reference Guide, http://nmap.org-bypass-firewalls-ids.html
4. Introduction to Cisco IOS NetFlow - A Technical Overview, http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps 6601/prod-white-paper0900aecd80406232.html
5. RFC 5101,Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information
6. http://tools.ietf.org/html/rfc5102
7. Varun chandola, Arindam banerjee and Preveen kumar, Anomaly Detection: A survey. ACM Comput. Surv. 41, 3 Article 15(july 2009)
8. A.Qayyum,M H Islam and Jamil, Taxonomy of Statistical Based Anomaly Detection Techniques for Intrusion Detection, IEEE International Conference on Emerging Technologies,2005
9. Nong Ye, Qiang Chen, Syed Masum Emran and Kyutae Noh, Chisquare Statistical Profiling for Anomaly Detection, In IEEE,2000
10. Sayed Masun Emran, Nang YE,Robustness of Chi-Square and Canberra Diastance Metrics for Computer Intrusion Detection,Quality and Reliability Engineering International, 2002
11. Nong Ye, Connie M. Borror, Darshit Parmar, Scalable Chi-Squae Distance versus Conventional Statistical Distance for Process Monotoring with Uncorrelated Data Variables, Quality and Reliability Engineering International, 2003
12. Myung-Sup Kim, Hun-Jeong Kang, Seong-Cheol Hong, Seung-Hwa Chung, and James W. Hong, A Flow-based Method for Abnormal Network Traffic Detection, IEEE/IFIP Network Operations and Managementk Symposium, 2004
13. HA Nguyen, T Van Nguyen, DI Kim, D Choi, Network traffic anomalies detection and identification with flow monitoring, WCON '08,May 2008
14. Yan hu, Dah-Ming Chiu, c. John C.S Lui, Adaptive Flow Aggregation - A New Solution for Robust Flow Monitoring under Security Attacks, in IEEE, Oct-2006
15. Yan hu, Dah-Ming Chiu, c. John C.S Lui, Entropy Based Adaptive Flow Aggregation, in IEEE/ACM, Dec 2007
16. C.Leckie, R.Kotagiri, A Probabilistic Approach to Detection Network Scans, in IEEE/IFIP,2002
17. Muraleedharan N, Analysis of TCP Flow data for Traffic Anomaly and Scan Detection, 16th IEEE International Conference on Networks, 2008
18. M. Z. Le The Quyen and Y. Tanaka. Anomaly identification based on flow analysis, TENCON 2006. 2006 IEEE Region 10 conference,pp. 1-4, November 2006
19. http://meteor.fokus.fraunhofer.de/libipfix/downloads.php
20. http://www.snort.org
21. http://nmap.org
22. http://www.hping.org