Studies in applying PCA and wavelet algorithms for network traffic anomaly detection

IEEE International Conference on High Performance Switching and Routing, HPSR

Volumn , Issue , 2013, Pages 185-190

  Novakov, Stevan ^a   Lung, Chung Horng ^a   Lambadaris, Ioannis ^a   Seddigh, Nabil ^b  

^a CARLETON UNIVERSITY   (Canada)

^b Solana Networks   (Canada)

Author keywords

Haar Wavelet Analysis; Network Anomaly Detection; PCA; Principal Component Analysis

Indexed keywords

HAAR WAVELET ANALYSIS; NETWORK ANOMALIES; NETWORK ANOMALY DETECTION; PCA; PCA (PRINCIPAL COMPONENT ANALYSIS); SECURITY MONITORING; SIGNATURE-BASED APPROACH; WAVELET ALGORITHMS;

ALGORITHMS; PRINCIPAL COMPONENT ANALYSIS; SPECTRUM ANALYSIS; WAVELET ANALYSIS;

COMPLEX NETWORKS;

EID: 84889048803     PISSN: 23255595     EISSN: 23255609     Source Type: Conference Proceeding    
DOI: 10.1109/HPSR.2013.6602310     Document Type: Conference Paper

References (20)

1. J. M. Estevez-Tapiador, et al., "Anomaly detection methods in wired networks: a survey and taxonomy," Computer Commun., 27(16), 2004.
2. D. Brauckhoff, K. Salamatian, and M. May, "Applying PCA for traffic anomaly detection: Problems and solutions," IEEE INFOCOM 2009.
3. P. Barford, et al., " A signal analysis of network traffic anomalies," Proc. ACM SIGCOMM Workshop on Internet measurement, pp. 71-82, 2002.
4. J. Song, et al., " Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation," Proc. Workshop on Building Anal. Datasets & Gathering Exp. Returns for Security, pp. 29-36, 2011.
5. Y.T. Chan, Wavelet Basics. Kluwer Academic Publishers, 1995.
6. J. Goswami and A. Chan, Fundamental of Wavelets - Theory, Algorithms and Applications. Toronto, Canada: Wiley, 1999.
7. H. Ringberg, et al., "Sensitivity of PCA for traffic anomaly detection," Performance Evaluation Review, vol. 35, no. 1, pp. 109-120, 2007.
8. A. Lakhina, et al., "Diagnosing network-wide traffic anomalies," ACM SIGCOMM Computer Commun. Review, vol. 34, pp. 219-230, 2004.
9. KDD 1999 Cup Data [Online]. Available at: http://kdd.ics.uci.edu/ databases/kddcup99/kddcup99.html[Last Accessed: March 2012]
10. K. Nyalkalkar, et al., " A comparative study of two network-based anomaly detection methods," Proc. of INFOCOM, pp. 176-180, 2011.
11. R. Dunia and S. J. Qin, "Multi-dimensional fault diagnosis using a subspace approach," American Control Conf., 1997.
12. S. Jungsuk, et al., "A Comparative study of unsupervised anomaly detection techniques using honeypot data," IEICE Trans. Inform. and Syst., vol. 93, no. 9, pp. 2544-2554, 2010.
13. L. Zheng, et al., "Traffic anomaly detection and containment using filterary-sketch," Proc. Eng., vol. 29, pp. 4297-4306, 2012.
14. J. Song, et al, "Toward a more practical unsupervised anomaly detection system," Information Sciences, 2011.
15. A. Dainotti, A. Pescapé, and G. Ventre, " Wavelet-based detection of DoS attacks," Proc. GLOBECOM, pp. 1-6, 2006.
16. M. Salagean, " Real network traffic anomaly detection based on Analytical Discrete Wavelet Transform," Proc. of Int. Conf. Optimization of Elect. and Electron. Equipment, pp. 926-931, 2010.
17. M. Salagean and I. Firoiu, " Anomaly detection of network traffic based on Analytical Discrete Wavelet Transform," Proc. of ICC, 2010.
18. A. Lakhina, et al, " Characterization of network-wide anomalies in traffic flows," Proc. of 4th Conf. on Internet Measurement, pp. 201-206, 2004.
19. C. Callegari, et al, "Application of wavelet packet transform to network anomaly detection," in Next Gen. Teletraffic and Wired/Wireless Advanced Networking, pp. 246-257, 2008.
20. A. Soule, et al, " Combining filtering and statistical methods for anomaly detection," Proc. of the 5th Conf. on Internet Measurement, 2005.