Detecting anomalous network traffic in organizational private networks

2013 IEEE International Multi-Disciplinary Conference on Cognitive Methods in Situation Awareness and Decision Support, CogSIMA 2013

Volumn , Issue , 2013, Pages 285-292

  Vaarandi, Risto ^a  

^a NATO Cooperative Cyber Defence Centre of Excellence   (Estonia)

Author keywords

cyber security; network anomaly detection; network forensics; network monitoring

Indexed keywords

CYBER SECURITY; NETWORK ANOMALIES; NETWORK ANOMALY DETECTION; NETWORK FORENSICS; NETWORK MONITORING; PRIVATE NETWORKS; SPECIAL PROPERTIES; TRAFFIC PATTERN;

ALGORITHMS; DECISION SUPPORT SYSTEMS; INTRUSION DETECTION;

COMPUTER NETWORKS;

EID: 84879763845     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CogSIMA.2013.6523859     Document Type: Conference Paper

References (18)

1. http://www.cisco.com/go/netflow
2. http://nfsen.sourceforge.net
3. http://fprobe.sourceforge.net
4. th USENIX Large Installation Systems Administration Conference, 2000, pp. 291-303.
5. th USENIX Large Installation Systems Administration Conference, 2004, pp. 121-132.
6. th USENIX Large Installation Systems Administration Conference, 2010, pp. 119-134.
7. th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprise, 2005, pp. 172-177.
8. th IEEE International Conference on Computer Communications, 2007, pp. 2541-2545
9. A. Kind, M. Ph. Stoecklin, X. Dimitropoulos, "Histogram-Based Traffic Anomaly Detection," IEEE Transactions on Network and Service Management, vol. 6 (2), 2009, pp. 110-121.
10. th ACM SIGCOMM Internet Measurement Conference, 2009, pp. 28-34.
11. th USENIX Large Installation Systems Administration Conference, 2011, pp. 241-252.
12. K. Bartoš, M. Grill, V. Krmíček, M. Řehák, and P. Čeleda, "Flow Based Network Intrusion Detection System using Hardware-Accelerated NetFlow Probes," Proceedings of CESNET Conference, 2008, pp. 49-56.
13. C. Wagner, J. François, R. State, and T. Engel, "Machine Learning Approach for IP-Flow Record Anomaly Detection," Proceedings of 10th International IFIP TC 6 Conference on Networking, 2011, pp. 28-39.
14. G. Münz, S. Li, and G. Carle, "Traffic Anomaly Detection Using K-Means Clustering," Proceedings of Leistungs-, Zuverlässigkeits- und Verlässlichkeitsbewertung von Kommunikationsnetzen und Verteilten Systemen, 4. GI/ITG-Workshop MMBnet 2007.
15. th IEEE International Conference on Computer Communications, 2012, pp. 49-54.
16. th IEEE/IFIP Network Operations and Management Symposium, 2008, pp. 1071-1074.
17. J. McHugh and C. Gates, "Locality: A New Paradigm for Thinking About Normal Behavior and Outsider Threat," Proceedings of 2003 New Security Paradigms Workshop, 2003, pp. 3-10.
18. th European Conference on Information Warfare and Security, 2011, pp. 261-267.