Detecting hidden anomalies using sketch for high-speed network data stream monitoring

Applied Mathematics and Information Sciences

Volumn 6, Issue 3, 2012, Pages 759-765

  Li, Aiping ^a   Han, Yi ^a   Zhou, Bin ^a   Han, Weihong ^a   Jia, Yan ^a  

^a NATIONAL UNIVERSITY OF DEFENSE TECHNOLOGY   (China)

Author keywords

Anomaly detection; EWMA; IP traceability; Mean standard deviation; Sketch

Indexed keywords

EID: 84870034702     PISSN: 19350090     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (10)

1. V. Paxson. Bro: A System for Detecting Network Intruders in Real-time [C], Proc. 7th conference on USENIX Security Symposium, 229-233 (1998).
2. M. Roesch, Snort: Light weight Intrusion Detection for Networks [C], Proc. 13th USENIX conference on System administration, 229-238 (1999).
3. R. Smith, C. Estan, S. Jha, and S. Kong. Deflating the big bang: fast and scalable deep packet inspection with extended finite automata [C], Proc. ACM SIGCOMM 2008 conference on Data communication, 207-218 (2008).
4. A. Lakhina, M. Crovella, and C. Diot. Diagnosing networkwide traffic anomalies [C], Proc. 2004 conference on Applications, technologies, architectures, and protocols for computer communications, 219-230 (2004).
5. R. Schweller, A. Gupta, E. Parsons, and Y. Chen. Reversible sketches for efficient and accurate change detection over network data streams [C]. Proc. 4th ACM SIGCOMM conference on Internet measurement, 207-212 (2004).
6. B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen. Sketchbased change detection: methods, evaluation, and applications [C]. Proc. 3rd ACM SIGCOMM conference on Internet measurement, 234-247 (2003).
7. G. Dewaele, K. Fukuda, P. Borgnat, P. Abry, and K. Cho. Extracting hidden anomalies using sketch and non Gaussian multiresolution statistical detection procedures [C]. Proc. 2007 workshop on Large scale attack defense, 145-152 (2007).
8. S. Muthukrishnan. Data streams: algorithms and applications [C]. Proc. fourteenth annual ACM-SIAM symposium on Discrete algorithms, 413-413 (2003).
9. J. Lawrence Carter and Mark N. Wegman. Universal classes of hash functions (Extended Abstract) [C]. Proc. ninth annual ACM symposium on Theory of computing, 106-112 (1977).
10. B. Chen, R. Curtmola, G. Ateniese, and R. Burns. Remote data checking for network coding-based distributed storage systems [C]. Proc. 2010 ACM workshop on Cloud computing security workshop, 31-42 (2010).