Combining sketch and wavelet models for anomaly detection

Proceedings - 2010 IEEE 6th International Conference on Intelligent Computer Communication and Processing, ICCP10

Volumn , Issue , 2010, Pages 313-319

  Pukkawanna, Sirikarn ^a   Fukuda, Kensuke ^b  

^a Technology Center   (Thailand)

^b JAPAN SCIENCE AND TECHNOLOGY AGENCY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; DATA SETS; DATA SUMMARIZATION TECHNIQUES; LOW-INTENSITY; MALICIOUS TRAFFIC; MALWARES; NETWORK DATA; OTHER ALGORITHMS; PRIOR KNOWLEDGE; RANDOM PROJECTIONS; TIME-SERIES DATA; TRAFFIC TRACES;

COMPUTER CRIME; HEURISTIC ALGORITHMS; WAVELET ANALYSIS;

TIME SERIES ANALYSIS;

EID: 78650139152     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICCP.2010.5606421     Document Type: Conference Paper

References (17)

1. Paul Barford, Jeffery Kline, David Plonka, and Amos Ron, "A signal analysis of network traffic anomalies," In IMW, pp. 71-82, November 2002.
2. Romain Fontugne, Toshio Hirotsu, Kensuke Fukuda, "An image processing approach to traffic anomaly detection," In Proc. Of 8th Asian Internet Engineering Conference (AINTEC 2008), pp.17-26, Bangkok, Thailand, November 18-20, 2008.
3. Sirikarn Pukkawanna, Panita Pongpaibool, and Vasaka Visoottiviseth, "LD2: A System for Lightweight Detection of Denial-Of-Service Attacks", In Proc. of MILCOM 2008, Conventional Center, San Diego, CA, USA, 17-19 November, 2008
4. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: Multilevel Traffic Classification in the Dark," In Proc. of ACM Sigcomm, 2005.
5. K. Fox, R. Henning, J. Reed, and R. Simonian, "A neural network approach towards intrusion detection", In Proc. 13th National Computer Security Conference, pp. 124-134, July 1990.
6. Cannady J., "Artificial neural networks for misuse detection," In Proc. of the '98 National Information System Security Conference (NISSC'98), Arlington: Virginia Press, pp. 443-456, 1998.
7. Matthew V. Mahoney, Philip K. Chan, and Muhammad H. Arshad, "A machine learning approach to anomaly detection", Technical Report, Department of Computer Science, Florida Institute of Technology Melbourne FL 32901, March 2003.
8. M. Roesch, "Snort - Lightweight Intrusion Detection for Networks," In Proc. of the 13th USENIX conference on System administration, pp. 229-238, November 1999.
9. B. Krishnamurty, S. Sen, Y. Zhang, and Y. Chen, "Sketch-based change detection: Methods, evaluation, and applications," In ACM IMC, October 2003.
10. G. Dewaele, K. Fukuda, P. Borgnat, P. Abry, and K. Cho, "Extracting Hidden Anomalies using Sketch and Non Gaussian Multiresolution Statistical Detection Procedure," In ACM SIGCOMM LSAD'07, pp. 145-152, August 2007.
11. X. Li et al, "Detection and identification of network anomalies using sketch subspaces", In ACM IMC, October 2006.
12. S. Farraposo, P. Owezarski, and E. Monteiro, "Nada - network anomaly detection algorithm," In DSOM '07, 4785:191-194, 2007.
13. K. Cho, K. Mitsuya, and A. Kato, "Traffic Data Repository at the WIDE Project," In USENIX 2000 FREENIX Track, June 2000.
14. General purpose hash function algorithms, http://www.partow.net/ programming/hashfunctions
15. Sasser port, https://tools.cisco.com/security/center/viewAlert.x?alertId= 7608
16. Worm port, http://en.wikipedia.org/wiki/Sasser-%28computer-worm%29
17. Worm port, http://reviews.cnet.com/4520-6600-7-5133023-1.html