A novel PCA-based network anomaly detection

IEEE International Conference on Communications

Volumn , Issue , 2011, Pages

  Callegari, Christian ^a   Gazzarrini, Loris ^a   Giordano, Stefano ^a   Pagano, Michele ^a   Pepe, Teresa ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; IP NETWORKS; KULLBACK LEIBLER DIVERGENCE; NETWORK ANOMALIES; NETWORK ANOMALY DETECTION; NETWORK ATTACK; NETWORK OPERATOR; PERFORMANCE ANALYSIS; STATE OF THE ART;

COMPUTER CRIME; PRINCIPAL COMPONENT ANALYSIS;

NETWORK MANAGEMENT;

EID: 80052170677     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icc.2011.5962595     Document Type: Conference Paper

References (15)

1. A. Lakhina, M. Crovella, and C. Diot, "Characterization of network-wide anomalies in traffic flows," in In ACM Internet Measurement Conference, pp. 201-206, 2004.
2. A. Lakhina, "Diagnosing network-wide traffic anomalies," in In ACM SIGCOMM, pp. 219-230, 2004.
3. A. Lakhina, M. Crovella, and C. Diot, "Mining anomalies using traffic feature distributions," tech. rep., 2005.
4. M.-L. Shyu, S.-C. Chen, K. Sarinnapakorn, and L. Chang, "A novel anomaly detection scheme based on principal component classifier," in In IEEE Foundations and New Directions of Data Mining Workshop, in conjunction with ICDM03, pp. 172-179, 2003.
5. A. Lakhina, K. Papagiannaki, M. Crovella, C. Diot, E. D. Kolaczyk, and N. Taft, "Structural analysis of network traffic flows," in In ACM SIGMETRICS, pp. 61-72, 2004.
6. H. Ringberg, A. Soule, J. Rexford, and C. Diot, "Sensitivity of pca for traffic anomaly detection," SIGMETRICS Perform. Eval. Rev., vol. 35, no. 1, pp. 109-120, 2007.
7. W. Wang and R. Battiti, "Identifying intrusions in computer networks with principal component analysis," in ARES '06: Proceedings of the First International Conference on Availability, Reliability and Security, (Washington, DC, USA), pp. 270-279, IEEE Computer Society, 2006.
8. Y. Bouzida, F. Cuppens, N. Cuppens-Boulahia, and S. Gombault, "Efficient intrusion detection using principal component analysis," in 3ème conférence sur la sécurité et architectures réseaux, La Londe, France, juin, RSM - Dépt. Réseaux, Sécurité et Multimédia (Institut Télécom- Télécom Bretagne), 2004.
9. W. Wang, X. Guan, and X. Zhang, "A novel intrusion detection method based on principal component analysis," in in Computer Security, Advances in Neural Networks, International IEEE Symposium on Neural Networks, pp. 657-662, Lecture, 2004.
10. X. Li, F. Bian, M. Crovella, C. Diot, R. Govindan, G. Iannaccone, and A. Lakhina, "Detection and identification of network anomalies using sketch subspaces," in IMC '06: Proceedings of the 6th ACM SIGCOMM conference on Internet measurement, (New York, NY, USA), pp. 147- 152, ACM, 2006.
11. C.-M.-C. Pascal and C. Fabrice, "Finding hierarchical heavy hitters with the count min sketch," in Proceedings of 4th International Workshop on Internet Performance, Simulation, Monitoring and Measurement, IPSMOME, 2006.
12. B. Claise, "Cisco Systems NetFlow Services Export Version 9." RFC 3954 (Informational), Oct. 2004.
13. "Flow-Tools Home Page." http://www.ietf.org/rfc/rfc3954.txt.
14. G. Cormode and S. Muthukrishnan, "An improved data stream summary: the count-min sketch and its applications," Journal of Algorithms, vol. 55, no. 1, pp. 58-75, 2005.
15. "The Internet2 Network." http://www.internet2.edu/network/.