Fast anomaly detection for large data centers

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2010, Pages

  Li, Ang ^a   Gu, Lin ^a   Xu, Kuai ^b  

^a HONG KONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Hong Kong)

^b ARIZONA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD COMPUTING; COMPUTER VIRUSES; CYBERSECURITY; INTERNET PROTOCOLS; NETWORK SECURITY; VIRUSES;

ANOMALOUS BEHAVIOR; ANOMALY DETECTION; CLOUD COMPUTING SERVICES; CYBER-ATTACKS; DATACENTER; DENIALOF- SERVICE ATTACKS; HIGH VOLUMES; LARGE DATA; RUNNING-IN; VOLUME DATA;

DENIAL-OF-SERVICE ATTACK;

EID: 79551630853     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2010.5683551     Document Type: Conference Paper

References (14)

1. Yahoo! Research and Academic Relations. G4: Yahoo! network flows data 1.0. http://research.yahoo.com/Academic Relations.
2. The CAIDA Dataset on the Witty Worm-March 19-24, 2004, Colleen Shannon, David Moore, and kc claffy. http://www.caida.org/data/passive/witty worm dataset.xml.
3. GTNetS http://www.ece.gatech.edu/research/labs/MANIACS/GTNetS/.
4. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. H. Katz, A. Konwinski, G. Lee, D. A. Patterson, A. Rabkin, I. Stoica, and M. Zaharia. Above the clouds: A berkeley view of cloud computing. Technical Report UCB/EECS-2009-28, Feb 2009.
5. CNet News. DDoS attack hobbles major sites, including Amazon. http://news.cnet.com/8301-30684 3-10421577-265.html, Dec. 2009.
6. R. Fontugne, T. Hirotsu, and K. Fukuda. An image processing approach to traffic anomaly detection. In Proc. of the 4th Asian Conf. on Internet Engineering (AINTEC'08), pages 17-26, 2008.
7. A. Hussain, J. Heidemann, and C. Papadopoulos. A framework for classifying denial of service attacks. In Proc. of the 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'03), pages 99-110, 2003.
8. A. Lakhina, M. Crovella, and C. Diot. Diagnosing network-wide traffic anomalies. In Proc. of the 2004 Conf. on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'04), pages 219-230, 2004.
9. A. Lakhina, M. Crovella, and C. Diot. Mining anomalies using traffic feature distributions. In Proc. of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications (SIGCOMM'05), pages 217-228, 2005.
10. V. Paxson. Bro: a system for detecting network intruders in real-time. In Proc. of the 7th Conf. on USENIX Security Symposium (SSYM'98), pages 3-3, 1998.
11. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off of my cloud! Exploring information leakage in third-party compute clouds. In Proc. of the 16th ACM Conf. on Computer and Communication Security (CCS'09), Nov. 2009.
12. M. Roesch. Snort - lightweight intrusion detection for networks. In Proc. of the 13th USENIX conference on System administration (LISA'99), pages 229-238, 1999.
13. C. Shannon and D. Moore. The spread of the witty worm. IEEE Security and Privacy, 2(4):46-50, 2004.
14. Wall Street Journal. Google introduces new security measures after cyber-attack. http:// online.wsj.com/ article/BT-CO-20100112-716798.html, Jan. 2009.