A novel multi time-scales PCA-based anomaly detection system

Proceedings of the 2010 International Symposium on Performance Evaluation of Computer and Telecommunication Systems, SPECTS'2010

Volumn , Issue , 2010, Pages 156-162

  Callegari, Christian ^a   Gazzarrini, Loris ^a   Giordano, Stefano ^a   Pagano, Michele ^a   Pepe, Teresa ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; ANOMALY DETECTION SYSTEMS; IP NETWORKS; MULTI SCALE ANALYSIS; NETWORK ANOMALIES; NETWORK ATTACK; NETWORK OPERATOR; PERFORMANCE ANALYSIS; STATE OF THE ART; TIME-SCALES;

COMPUTER CRIME; TELECOMMUNICATION SYSTEMS;

NETWORK MANAGEMENT; COMPUTER CRIME;

EID: 78649292799     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (15)

1. A. Lakhina, M. Crovella, and C. Diot, "Characterization of network-wide anomalies in traffic flows," in In ACM Internet Measurement Conference, pp. 201-206, 2004.
2. A. Lakhina, "Diagnosing network-wide traffic anomalies," in In ACM SIGCOMM, pp. 219-230, 2004.
3. A. Lakhina, M. Crovella, and C. Diot, "Mining anomalies using traffic feature distributions," tech. rep., 2005.
4. A. Lakhina, K. Papagiannaki, M. Crovella, C. Diot, E. D. Kolaczyk, and N. Taft, "Structural analysis of network traffic flows," in In ACM SIGMETRICS, pp. 61-72, 2004.
5. M.-L. Shyu, S.-C. Chen, K. Sarinnapakorn, and L. Chang, "A novel anomaly detection scheme based on principal component classifier," in In IEEE Foundations and New Directions of Data Mining Workshop, in conjunction with ICDM03, pp. 172-179, 2003.
6. H. Ringberg, A. Soule, J. Rexford, and C. Diot, "Sensitivity of pca for traffic anomaly detection," SIGMETRICS Perform. Eval. Rev., vol. 35, no. 1, pp. 109-120, 2007.
7. W. Wang and R. Battiti, "Identifying intrusions in computer networks with principal component analysis," in ARES '06: Proceedings of the First International Conference on Availability, Reliability and Security, (Washington, DC, USA), pp. 270-279, IEEE Computer Society, 2006.
8. Y. Bouzida, F. Cuppens, N. Cuppens-Boulahia, and S. Gombault, "Efficient intrusion detection using principal component analysis," in 3ème conférence sur la sécurité et architectures réseaux, La Londe, France, juin, RSM - Dépt. Réseaux, Sécurité et Multimédia (Institut Télécom- Télécom Bretagne), 2004.
9. W. Wang, X. Guan, and X. Zhang, "A novel intrusion detection method based on principal component analysis," in in Computer Security, Advances in Neural Networks, International IEEE Symposium on Neural Networks, pp. 657-662, Lecture, 2004.
10. X. Li, F. Bian, M. Crovella, C. Diot, R. Govindan, G. Iannaccone, and A. Lakhina, "Detection and identification of network anomalies using sketch subspaces," in IMC '06: Proceedings of the 6th ACM SIGCOMM conference on Internet measurement, (New York, NY, USA), pp. 147-152, ACM, 2006.
11. C.-M.-C. Pascal and C. Fabrice, "Finding hierarchical heavy hitters with the count min sketch," in Proceedings of 4th International Workshop on Internet Performance, Simulation, Monitoring and Measurement, IPS-MOME, 2006.
12. B. Claise, "Cisco Systems NetFlow Services Export Version 9." RFC 3954 (Informational), Oct. 2004.
13. "Flow-Tools Home Page." http://www.ietf.org/rfc/rfc3954.txt.
14. G. Cormode and S. Muthukrishnan, "An improved data stream summary: the count-min sketch and its applications," Journal of Algorithms, vol. 55, no. 1, pp. 58-75, 2005.
15. "The Internet2 Network." http://www.internet2.edu/network/.