A novel anomaly detection system based on seven-dimensional flow analysis

Proceedings - IEEE Global Communications Conference, GLOBECOM

Volumn , Issue , 2013, Pages 735-740

  De Assis, Marcos V O ^a   Rodrigues, Joel J P C ^b   Proenca, Mario Lemes ^a  

^a STATE UNIVERSITY OF LONDRINA   (Brazil)

^b UNIVERSITY OF BEIRA INTERIOR   (Portugal)

Author keywords

DSNSF; Holt Winters; HWDS; Network Management; Seven dimensional Flow Analysis; Traffic Characterization

Indexed keywords

ANOMALY DETECTION SYSTEMS; DIGITAL SIGNATURE OF NETWORK SEGMENT USING FLOW ANALYSE; FLOW ANALYSIS; HOLT-WINTERS; HWDS; NETWORK SEGMENT; NETWORKS MANAGEMENT; SEVEN-DIMENSIONAL FLOW ANALYSE; TRAFFIC CHARACTERIZATION;

NETWORK MANAGEMENT;

EID: 84904103233     PISSN: 23340983     EISSN: 25766813     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2013.6831160     Document Type: Conference Paper

References (17)

1. A. Prieto, R. Stadler, "Adaptative real-time monitoring for large-scale networked systems", in Integrated Network Management, 2009 (IM '09). IFIP/IEEE International Symposium on, June 2009, pp. 790-795.
2. X. Huang, S. Ganapathy, T. Wolf, "A Framework for Network State Management in the Next-Generation Internet Architecture," Global Telecommunications Conference, 2008. IEEE GLOBECOM 2008. IEEE, pp. 1-5, 2008, doi: 10. 1109/GLOCOM. 2008. ECP. 435.
3. K. Tsagkaris et. al., "Identifying standardization opportunities of an operator-driven, framework for unifying autonomic network and service management," Communications (ICC), 2012 IEEE International Conference on, pp. 6921-6925, 2012, doi: 10. 1109/ICC. 2012. 6364850.
4. Y. Kanda, K. Fukuda, T. Sugawara, "A Flow Analysis for Mining Traffic Anomalies," Communications (ICC), 2010 IEEE International Conference on, pp. 1-5, 2010. doi: 10. 1109/ICC. 2010. 5502463.
5. A. Li, L. Gu, K. Xu, "Fast Anomaly Detection for Large Data Centers," Global Telecommunications Conference (GLOBECOM 2010), 2010 IEEE, pp. 1-6, 6-10 Dec. 2010, doi: 10. 1109/GLOCOM. 2010. 568355.
6. S. Molnár, Z. Móczár, "Three-dimensional characterization of internet flows", in Proceedings of 2011 IEEE International Conference on Communications (ICC '11), pp. 1-6, doi: 10. 1109/icc. 2011. 5963476.
7. M. V. O. Assis, L. F. Carvalho, J. J. P. C. Rodrigues, M. L. Proença Jr, "Holt-Winters Statistical Forecasting and ACO Metaheuristic for Traffic Characterization", in 2013 IEEE International Conference on Communications (ICC'13), to be published.
8. G. Cheng, J. Gong, Y. Tang, "A Hybrid Sampling Approach for Network Flow Monitoring" End-to-End Monitoring Techniques and Services, 2007. E2EMON '07. Workshop on, pp. 1-7, Yearly 21 2007-May 21 2007, doi: 10. 1109/E2EMON. 2007. 375315.
9. L. Xiang, X. Ge, C. Liu, L. Shu, C. Wang, "A New Hybrid Network Traffic Prediction Method," Global Telecommunications Conference (GLOBECOM 2010), 2010 IEEE, pp. 1-5, 6-10 Dec. 2010. doi: 10. 1109/GLOCOM. 2010. 5684249.
10. A. Lakhina, K. Papagiannaki, M. Crovella, C. Diot, E. D. Kolaczyk, N. Taft, "Structural analysis of network traffic flows", SIGMETRICS Perform. Eval. Rev. 32, 1 (June 2004), 61-72. doi: 10. 1145/1012888. 1005697.
11. Y. Kanda, K. Fukuda, T. Sugawara, "Evaluation of Anomaly Detection Based on Sketch and PCA", Global Telecommunications Conference (GLOBECOM 2010), 2010 IEEE, pp. 1-5, 6-10 Dec. 2010, doi: 10. 1109/GLOCOM. 2010. 5683878.
12. S. Fu, "Performance Metric Selection for Autonomic Anomaly Detection on Cloud Computing Systems," Global Telecommunications Conference (GLOBECOM 2011), 2011 IEEE, pp. 1-5, 5-9 Dec. 2011, doi: 10. 1109/GLOCOM. 2011. 6134532.
13. J. D. Brutlag, "Aberrant behavior detection in time series for network monitoring", in Proceedings of 14th USENIX conference on System administration (LISA 00'), USENIX Association, Berkley, CA, USA, pp. 139-146.
14. S. Chang, X. Qiu, Z. Gao, F. Qi, K. Liu, "A flow-based anomaly detection method using entropy and multiple traffic features," Broadband Network and Multimedia Technology (IC-BNMT), 2010 3rd IEEE International Conference on, doi:0. 1109/ICBNMT. 2010. 5705084.
15. C. E. Shannon, "A Mathematical Theory of Communication," Bell System Technical Journal, vol. 27, no. 3, pp. 379-423, Jul. 1948.
16. P. Barford, J. Kline, D. Plonka, A. Ron, "A signal analysis of network traffic anomalies", in Proceedings of 2002 SIGCOMM Internet Measurement Workshop. Marseille, France: ACM, 2002, pp 61-72.
17. T. Fawcett, "An introduction to ROC analysis," Pattern Recognition Letters, vol. 27, pp. 861-874, 2005.