Combining sketches and wavelet analysis for multi time-scale network anomaly detection

Computers and Security

Volumn 30, Issue 8, 2011, Pages 692-704

  Callegari, C ^a   Giordano, S ^a   Pagano, M ^a   Pepe, T ^a  

^a UNIVERSITY OF PISA   (Italy)

Author keywords

Anomaly detection; Sketches; Wavelet analysis

Indexed keywords

ANOMALY DETECTION; DETECTION RATES; DYNAMIC SECURITY; INTRUSION DETECTION SYSTEMS; KEY ELEMENTS; MULTI TIME-SCALE ANALYSIS; NETWORK ANOMALIES; NETWORK ANOMALY DETECTION; PERFORMANCE ANALYSIS; RAPID DEVELOPMENT; SECURITY TECHNOLOGY; SKETCHES; TIME-SCALES;

COMMUNICATION SYSTEMS; INTRUSION DETECTION; WAVELET ANALYSIS;

NETWORK SECURITY;

EID: 80955142776     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2011.08.006     Document Type: Article

References (25)

1. W.H. Allen, and G.A. Marin On the self-similarity of synthetic traffic for the evaluation of intrusion detection systems Proceedings of the 2003 Symposium on applications and the internet, SAINT '03 2003 IEEE Computer Society Washington, DC, USA
2. P. Barford, J. Kline, D. Plonka, and A. Ron A signal analysis of network traffic anomalies IMW '02: Proceedings of the 2nd ACM SIGCOMM Workshop on internet measurment 2002 71 82
3. C. Callegari, S. Giordano, M. Pagano, and T. Pepe On the use of sketches and wavelet analysis for network anomaly detection Proceedings of the 6th International Wireless Communications and Mobile Computing Conference, IWCMC '10 2010 ACM New York, NY, USA pp. 331-335
4. G. Carl, R.R. Brooks, and S. Rai Wavelet based denial-of-service detection Computers and Security 25 8 2006 600 615 (Pubitemid 44765088)
5. Cheng C-M, Kung HT Tan K-S. Use of spectral analysis in defense against DoS attacks, in: Proceedings of the IEEE GLOBECOM, vol. 3, 2002, pp. 2143-2148.
6. B. Claise Cisco Systems NetFlow Services Export Version 9, RFC 3954 (Informational) Oct. 2004
7. G. Cormode, and S. Muthukrishnan An improved data stream summary: the count-min sketch and its applications Journal of Algorithms 55 1 2005 58 75 (Pubitemid 40357145)
8. A. Dainotti, A. Pescap, and G. Ventre Wavelet-based detection of dos attacks Proceedings of Global Telecommunications Conference 2006. GLOBECOM '06 2006 IEEE 1 6
9. I. Daubechies Ten lectures on Wavelets, no. 61 in CBMS-NSF Series in Applied Mathematics 1992 SIAM Philadelphia
10. G. Dewaele, K. Fukuda, P. Borgnat, P. Abry, and K. Cho Extracting hidden anomalies using sketch and non Gaussian multiresolution statistical detection procedures LSAD '07: Proceedings of the 2007 workshop on Large scale attack defense 2007 ACM New York, NY, USA 145 152
11. A.C. Gilbert Multiscale analysis and data networks Applied and Computational Harmonic Analysis 10 1996 185 202 (Pubitemid 33675917)
12. M. Hamdi, and N. Boudriga Detecting denial-of-service attacks using the wavelet transform Computer Communications 30 2007 3203 3213 (Pubitemid 47552558)
13. P. Huang, A. Feldmann, and W. Willinger A non-instrusive, wavelet-based approach to detecting network performance problems IMW '01: Proceedings of the 1st ACM SIGCOMM Workshop on internet measurement 2001 213 227
14. C.-T. Huang, S. Thareja, and Y.-J. Shin Wavelet-based real time detection of network traffic anomalies International Journal of Network Security 6 2008 309 320
15. S.S. Kim, A.L.N. Reddy, and M. Vannucci Detecting traffic anomalies at the source through aggregate analysis of packet header data 2004
16. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen Sketch-based change detection: methods, evaluation, and applications Internet measurement Conference 2003 234 247 (Pubitemid 40730656)
17. A. Lakhina, M. Crovella, and C. Diot Mining anomalies using traffic feature distributions SIGCOMM Computer Communication Review 35 4 2005 217 228 (Pubitemid 46323506)
18. L. Li, and G. Lee DDoS attack detection and wavelets Telecommunication Systems 28 2005 435 451 (Pubitemid 40536354)
19. W. Lu, and A.A. Ghorbani Network anomaly detection based on wavelet analysis EURASIP Journal of Advances in Signal Processing 4 2009 1 4 16
20. S. Mallat Multifrequency channel decompositions of images and wavelet models IEEE Transactions on Acoustics, Speech and Signal Processing 37 12 1989 2091 2110 (Pubitemid 20642719)
21. C.-M.-C. Pascal, and C. Fabrice Finding hierarchical heavy hitters with the count min sketch Proceedings of 4th International Workshop on internet performance, Simulation, monitoring and measurement, IPS-MOME 2006
22. S. Pukkawanna, and K. Fukuda Combining sketch and wavelet models for anomaly detection Intelligent computer communication and processing (ICCP), 2010 IEEE International Conference on 2010 313 319
23. J. Sun, H. Yang, J. Tian, and F. Wu Intrusion detection method based on wavelet neural network International Workshop on knowledge Discovery and data Mining 2009 851 854
24. M. Thorup, and Y. Zhang Tabulation based 4-universal hashing with applications to second moment estimation SODA '04: Proceedings of the fifteenth annual ACM-SIAM symposium on Discrete algorithms 2004 Society for Industrial and Applied Mathematics Philadelphia, PA, USA 615 624
25. M. Thottan, G. Liu, and C. Ji Anomaly Detection Approaches for Communication Networks 2010 Springer London