Distribution-based anomaly detection in network traffic

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7754, Issue , 2013, Pages 202-216

  Coluccia, Angelo ^a   D'Alconzo, Alessandro ^b   Ricciato, Fabio ^a,b  

^a UNIVERSITY OF SALENTO   (Italy)

^b TELECOMMUNICATIONS RESEARCH CENTER VIENNA FTW   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

FORMAL METHODS; HEURISTIC METHODS; QUALITY CONTROL; QUALITY OF SERVICE;

DETECTION APPROACH; EMPIRICAL DISTRIBUTIONS; HYPOTHESIS TESTING; LARGE POPULATION; NON-STATIONARITIES; NUMBER OF ACTIVE USERS; TRAFFIC ANOMALIES; TRAFFIC VARIABLES;

ANOMALY DETECTION;

EID: 84875934272     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-36784-7_9     Document Type: Article

References (22)

1. Ali, S., Silvey, S.: A general class of coefficients of divergence of one distribution. Journal of Royal Statistical Society 28 (1966
2. Csisz'ar, I.: Information-Type measures of difference of probability distributions and indirect observations. Studia Sci. Math. Hungar. 2, 299-318 (1967
3. Burgess, et al.: Measuring system normality. ACM Transactions on Computer Systems 20 (2002
4. D'Alconzo, et al.: A distribution-based approach to anomaly detection for 3G mobile networks. In: IEEE Globecom (2009
5. D'Alconzo, et al.: Distribution-based anomaly detection in 3G mobile networks: From theory to practice. Int. J. of Network Management (2010
6. Dasu, et al.: An information-Theoretic approach to detecting changes in multidimensional data streams. In: INTERFACE 2006 (2006
7. Gu, et al.: Detecting anomalies in network traffic using maximum entropy estimation. In: IMC (2005
8. Lakhina, et al.: Structural analysis of network traffic flows. In: ACM SIGMETRICS (June 2004
9. Svoboda, et al.: Composition of GPRS/UMTS traffic: Snapshots from a live network. In: IPS-MOME 2006 (2006
10. Maier, G., Feldmann, A., Paxson, V., Allman, M.: On dominant characteristics of residential broadband internet traffic. In: IEEE IMC (2009
11. Johnson, D.H., Sinanovic, S.: Symmetrizing the Kullback-Leibler distance. IEEE Transactions on Information Theory (March 2001
12. Khayam, A., Radha, H.: Linear-complexity models for wireless MAC-To-MAC channels. ACM Wireless Networks 11 (2005
13. Lakhina, A., Crovella, M., Diot, C.: Mining anomalies using traffic feature. In: ACM SIGCOMM (2005
14. Liese, F., Vajda, I.: Convex statistical distances. Teubner-Verlag (1987
15. Ricciato, F., Coluccia, A., D'Alconzo, A., Veitch, D., Borgnat, P., Abry, P.: On the role of flows and sessions in internet traffic modeling: An explorative toy-model. In: IEEE Globecom (2009
16. Ringberg, H., Roughan, M., Rexford, J.: The need for simulation in evaluating anomaly detectors. ACM SIGCOMM Computer Communication Review 38(1), 55-59 (2008
17. Ringberg, H., Soule, A., Rexford, J.: Webclass: Adding rigor to manual labeling of traffic anomalies. ACM SIGCOMM Computer Communication Review 38(1), 35-38 (2008
18. Sesia, S., Toufik, I., Baker, M.: LTE, The UMTS Long Term Evolution: From Theory to Practice. J. Wiley & Sons (2009
19. Thomas, J.A.T., Cover, T.M.: Elements of Information Theory. J. Wiley & Sons (1991
20. Van Trees, H.L.: Detection, Estimation, and Modulation Theory. J. Wiley & Sons (2001
21. Vapnik, V.N.: Statistical Learning Theory. J. Wiley & Sons (1998
22. Song, X., et al.: Statistical change detection for multi-dimensional data. In: 13th ACM KDD 2007, pp. 667-676. ACM (2007