WebClass: Adding rigor to manual labeling of traffic anomalies

Computer Communication Review

Volumn 38, Issue 1, 2008, Pages 35-38

  Ringberg, Haakon ^a   Soule, Augustin ^b   Rexford, Jennifer ^a  

^a Princeton University   (United States)

^b Thomson ^*  (France)

Author keywords

Data labeling; Data sharing; Database; Network traffic analysis

Indexed keywords

ANOMALY DETECTOR; DATA LABELING; DATA SHARING; DATABASE; ERROR PRONES; MANUAL INSPECTION; NETWORK TRAFFIC ANALYSIS; OPERATIONAL NETWORK; REALISTIC MODEL; RESEARCH COMMUNITIES; TRAFFIC ANOMALIES; WEB-BASED INFRASTRUCTURE;

GRAPHICAL USER INTERFACES;

DETECTORS;

EID: 78650730087     PISSN: 01464833     EISSN: 01464833     Source Type: Conference Proceeding    
DOI: 10.1145/1341431.1341437     Document Type: Conference Paper

References (20)

1. Barford, P., Kline, J., Plonka, D., and Ron, A. A signal analysis of network traffic anomalies. In ACM Internet Measurement Workshop (Marseille, France, 2002), pp. 71-82.
2. Cisco NetFlow. http://www.cisco.com/en/US/products/ps6601/products-ios- protocol-group-home.html.
3. Estan, C, Savage, S., and Varghese, G. Automatically inferring patterns of resource consumption in network traffic. In ACM SIGCOMM (Karlsruhe, Germany, 2003), pp. 137-148.
4. Garrett, J. J. Ajax: A new approach to web applications. http://www.adaptivepath.com/publications/essays/archives/000385.php.
5. Huang, Y., Feamster, N., Lakhina, A., and Xu, J. J. Diagnosing network disruptions with network-wide analysis. In ACM SIGMETRICS (San Diego, CA, USA, 2007).
6. Kompella, R. R., Singh, S., and Varghese, G. On scalable attack detection in the network. In ACM Internet Measurement Conference (New York, NY, USA, 2004), pp. 187-200.
7. Krishnamurthy, B., Sen, S., Zhang, Y., and Chen, Y. Sketch-based change detection: Methods, evaluation, and applications. In ACM Internet Measurement Conference (Miami Beach, FL, USA, 2003), pp. 234-247.
8. Lakhina, A., Crovella, M., and Diot, C. Diagnosing network-wide traffic anomalies. In ACM SIGCOMM (Portland, Oregon, USA, 2004), pp. 219-230.
9. Lakhina, A., Crovella, M., and Diot, C. Mining anomalies using traffic feature distributions. In ACM SIGCOMM (Philadelphia, Pennsylvania, USA, 2005), pp. 217-228.
10. Li, X., Bian, F., Crovella, M., Diot, C, Govindan, R., Iannaccone, G., and Lakhina, A. Detection and identification of network anomalies using sketch subspaces. In ACM Internet Measurement Conference (Rio de Janeiro, Brazil, October 2006).
11. Lippmann, R. P., Fried, D. J., Graf, I., Haines, J. W., Kendall, K. R., McClung, D., Weber, D., Webster, S. E., Wyschogrod, D., Cunningham, R. K., and Zissman, M. A. Evaluating intrusion detection systems: The 1998 darpa off-line intrusion detection evaluation. discex 02(2000), 1012.
12. Marcus, M. P., Marcinkiewicz, M. A., and Santorini, B. Building a large annotated corpus of english: the penn treebank. Comput. Linguist. 19, 2(1993), 313-330.
13. Ringberg, H., Roughan, M., and Rexford, J. The need for simulation in evaluating anomaly detectors. SIGCOMM Comput. Commun. Rev. (2008).
14. Ringberg, H., Soule, A., Rexford, J., and Diot, C. Sensitivity of PCA for traffic anomaly detection. In ACM SIGMETRICS (San Diego, CA, USA, 2007).
15. Sekar, V., Duffield, N. G., Spatscheck, O., van der Merwe, J. E., and Zhang, H. LADS: Large-scale automated DDoS detection system. In USENIX Technical Conference (2006), pp. 171-184.
16. Soule, A., Salamatian, K., and Taft, N. Combining filtering and statistical methods for anomaly detection. In ACM Internet Measurement Conference (Berkeley, California, USA, October 2005).
17. Soule, A., Silveira, F., Ringberg, H., and Diot, C. Challenging the supremacy of traffic matrices in anomaly detection. In ACM Internet Measurement Conference (2007), pp. 105-110.
18. von Ahn, L., and Dabbish, L. Labeling images with a computer game. In CHI'04: Proceedings of the SIGCHI conference on Human factors in computing systems (New York, NY, USA, 2004), pp. 319-326.
19. Zhang, Y., Ge, Z., Greenberg, A., and Roughan, M. Network anomography. In ACM Internet Measurement Conference (Berkeley, California, USA, October 2005).
20. Zhang, Y., Singh, S., Sen, S., Duffield, N., and Lund, C. Online identification of hierarchical heavy hitters: Algorithms, evaluation, and applications. In ACM Internet Measurement Conference (Taormina, Sicily, Italy, 2004), pp. 101-114.