Scorpius: sFlow network anomaly simulator

Journal of Computer Science

Volumn 11, Issue 4, 2015, Pages 662-674

  De Assis, Marcos V O ^a   Proença, Mario Lemes ^b  

^a FEDERAL UNIVERSITY OF PARANÁ   (Brazil)

^b STATE UNIVERSITY OF LONDRINA   (Brazil)

Author keywords

Anomaly; Flows; Network management; Scorpius; Simulation

Indexed keywords

EID: 84946412609     PISSN: 15493636     EISSN: None     Source Type: Journal    
DOI: 10.3844/jcssp.2015.662.674     Document Type: Article

References (37)

1. Ab-Rahman, S.M. and S.R.A. Mahir, 2011. Development of an algorithm for fiber-to-the-home passive optical network automatic self-restoration scheme using access control system. J. Comput. Sci., 7: 1846-1853. DOI: 10.3844/jcssp.2011.1846.1853
2. Altman, D.G. and J.M. Bland, 1983. Measurement in medicine: The analysis of method comparison studies. J. Royal Statistical Society, 32: 307-317. DOI: 10.2307/2987937
3. Amaral, A.A., B.B. Zarpelão, L.S. Mendes, J.J.P.C. Rodrigues and M.L. Proença Jr., 2012. Inference of network anomaly propagation using spatio-temporal correlation. J. Netw. Comput. Appli., 35: 1781-1792. DOI: 10.1016/j.jnca.2012.07.003
4. Androulidakis, G. and S. Papavassiliou, 2007. Intelligent flow-based sampling for effective network anomaly detection. Proceedings of the IEEE Global Telecommunications Conference, Nov. 26-30, IEEE Xplore Press, Washington, pp: 1948-1953. DOI: 10.1109/GLOCOM.2007.374
5. Bartos, K., M. Rehak and V. Krmicek, 2011. Optimizing flow sampling for network anomaly detection. Proceedings of the 7th International Wireless Communications and Mobile Computing Conference, Jul. 4-8, IEEE Xplore Press, Istanbul, pp: 1304-1309. DOI: 10.1109/IWCMC.2011.5982728
6. Bhatia, A., P.S. Dhabe and S.G. Pukale, 2009. Java based simulator to detect zero-day silent worms using ACTM. Proceedings of the IEEE International Advance Computing Conference, Mar. 6-7, IEEE Xplore Press, Patiala, pp: 847-852. DOI: 10.1109/IADCC.2009.4809125
7. Brutlag, J.D., 2000. Aberrant behavior detection in time series for network monitoring. Proceedings of the 14th Systems Administration Conference, (Dec. 3-8), USENIX Association, USA, pp: 139-146.
8. Canova, B.S., P.H. Christensen, M.D. Lee, B.R. Tripp and M.H. Pack et al., 1999. Simulation to support operational testing: A practical application. Proceedings of the Winter Simulation Conference, Dec. 5-8, IEEE Xplore Press, Phoenix, pp: 1071-1078. DOI: 10.1109/WSC.1999.816823
9. Carvalho, L.F., G. Fernandes Jr., M.V.O. de Assis, J.J.P.C. Rodrigues and M.L. Proença Jr., 2014. Digital signature of network segment for healthcare environments support. IRBM, 35: 299-309. DOI: 10.1016/j.irbm.2014.09.001
10. Carvalho, L.F., J.J.P.C. Rodrigues, S. Barbon and M.L. Proenca, 2013. Using ant colony optimization metaheuristic and dynamic time warping for anomaly detection. Proceedings of the 21st International Conference on Software, Telecommunications and Computer Networks, Sep. 18-20, IEEE Xplore Press, Primosten, pp: 1-5. DOI: 10.1109/SoftCOM.2013.6671906
11. de Assis, M.V.O., 2014. Scorpius-sFlow Anomaly Simulator (version 1.0). JAVA. Brazil.
12. de Assis, M.V.O., J.J.P.C. Rodrigues and M.L. Proença Jr., 2013. A novel anomaly detection system based on seven-dimensional flow analysis. Proceedings of the IEEE Global Communications Conference, Dec. 9-13, IEEE Xplore Press, Atlanta, pp: 735-740. DOI: 10.1109/GLOCOM.2013.6831160
13. de Assis, M.V.O., J.J.P.C. Rodrigues and M.L. Proença Jr., 2014. A seven-dimensional flow analysis to help autonomous network management. Inform. Sci., 278: 900-913. DOI: 10.1016/j.ins.2014.03.102
14. Fernandes, G., A.M. Zacaron, J.J.P.C. Rodrigues and M.L. Proenca, 2013. Digital signature to help network management using principal component analysis and k-means clustering. Proceedings of the IEEE International Conference on Communications, Jun. 9-13, IEEE Xplore Press, Budapest, pp: 2519-2523. DOI: 10.1109/ICC.2013.6654912
15. Hong, W., G. Zhenghu, G. Qing and W. Baosheng,2008. Detection network anomalies based on packet and flow analysis. Proceedings of the 7th International Conference on Networking, Apr. 13-18, IEEE Xplore Press, Cancun, pp: 497-502. DOI: 10.1109/ICN.2008.83
16. Hua, L., H. Guang-min and Y. Xing-miao, 2007. Global detection of DDoS attack based on time and frequency analysis. Proceedings of the International Conference on Communications, Circuits and Systems, Jul. 11-13, IEEE Xploer Press, Kokura, pp: 462-466. DOI: 10.1109/ICCCAS.2007.6251606
17. Huang, X., S. Ganapathy and T. Wolf, 2008. A framework for network state management in the next-generation internet architecture. Proceedings of the IEEE Global Telecommunications Conference, Nov. 30-Dec. 4, IEEE Xplore Press, New Orleans, pp: 1-5. DOI: 10.1109/GLOCOM.2008.ECP.435
18. Jadidi, Z., V. Muthukkumarasamy, E. Sithirasenan and M. Sheikhan, 2013. Flow-based anomaly detection using neural network optimized with gsa algorithm. Proceedings of the IEEE 33rd International Conference on Distributed Computing Systems Workshops, Jul. 8-11, IEEE Xplore Press, Philadelphia, pp: 76-81. DOI: 10.1109/ICDCSW.2013.40
19. Korczynski, M., L. Janowski and A. Duda, 2011. An accurate sampling scheme for detecting SYN flooding attacks and portscans. Proceedings of the IEEE International Conference on Communications, Jun. 5-9, IEEE Xplore Press, Kyoto, pp: 1-5. DOI: 10.1109/icc.2011.5962593
20. Kuhl, M.E., J. Kistner, K. Costantini and M. Sudit, 2007. Cyber attack modeling and simulation for network security analysis. Proceedings of the Winter Simulation Conference, Dec. 9-12, IEEE Xplore Press, Washington, pp: 1180-1188. DOI: 10.1109/WSC.2007.4419720
21. Li, K., W. Zhou, P. Li, J. Hai and J. Liu, 2009. Distinguishing DDoS attacks from flash crowds using probability metrics." Proceedings of the 3rd International Conference on Network and System Security, Oct. 19-21, IEEE Xplore Press, Gold Coast, pp: 9-17. DOI: 10.1109/NSS.2009.35
22. Liu, W., 2009. Research on DoS attack and detection programming. Proceedings of the 3rd International Symposium on Intelligent Information Technology Application, Nov. 21-22, IEEE Xplore Press, Nanchang, pp: 207-210. DOI: 10.1109/IITA.2009.165
23. Mempel, C., B. Cialla and R. Luxenburger, 2010. Optimized testing of modern protection equipment using transient simulation. Proceedings of the 10th IET International Conference on Developments in Power System Protection, Mar. 29-Apr. 1, IEEE Xplore Press, Manchester, pp: 1-5. DOI: 10.1049/cp.2010.0340
24. Pena, E.H.M., S. Barbon, J.J.P.C. Rodrigues and M.L. Proença Jr., 2014a. Correlational paraconsistent machine for anomaly detection. Proceedings of the IEEE Global Communications Conference, Dec. 8-12, IEEE Xplore Press, Austin, pp: 551-556. DOI: 10.1109/GLOCOM.2014.7036865
25. Pena, E.H.M., S. Barbon, J.J.P.C. Rodrigues and M.L. Proença Jr., 2014b. Anomaly detection using digital signature of network segment with adaptive arima model and paraconsistent logic." Proceedings of the IEEE Symposium on Computers and Communication, Jun. 23-16, IEEE Xplore Press, Funchal, pp: 1-6. DOI: 10.1109/ISCC.2014.6912503
26. Ponnuramu, V. and L. Tamilselvan, 2012. Data integrity proof and secure computation in cloud computing. J. Comput. Sci., 8: 1987-1995. DOI: 10.3844/jcssp.2012.1987.1995
27. Praetox Technologies, 2010. Low Orbit Ion Cannon. Intense School, NFOSEC Institute.
28. Prakash, P., G. Kousalya, S.K. Vasudevan and K.K. Rangaraju, 2014. Distributive power migration and management algorithm for cloud environment. J. Comput. Sci., 10: 484-491. DOI: 10.3844/jcssp.2014.484.491
29. Proença Jr., M.L., C. Coppelmans, M. Bottoli, A. Alberti and L.S. Mendes, 2004. The Hurst Parameter for Digital Signature of Network Segment. In: Telecommunications and Networking-ICT 2004, J.N. de Souza, P. Dini and P. Lorenz (Eds.), Springer Berlin Heidelberg, Brazil, ISBN-10: 978-3-540-27824-5, pp: 772-781.
30. Puketza, N.J., K. Zhang, M. Chung, B. Mukherjee and R.A. Olsson. 1996. A methodology for testing intrusion detection systems. IEEE Trans. Software Eng., 22: 719-729. DOI: 10.1109/32.544350
31. Sarin, H., M. Kokkolaras, G. Hulbert, P. Papalambros and S. Barbat et al., 2010. Comparing time histories for validation of simulation models: Error measures and metrics. J. Dynamic Syst. Measurement Control, 132: 061401-061411. DOI: 10.1115/1.4002478
32. Shannon, C.E., 2001. A mathematical theory of communication. SIGMOBILE Mobile Comput. Commun. Rev., 5: 3-55. DOI: 10.1145/584091.584093
33. Sinreich, D. and Y.N. Marmor, 2004. A simple and intuitive simulation tool for analyzing emergency department operations. Proceedings of the Winter Simulation Conference, Dec. 5-8, IEEE Xplore Press, pp: 1994-2002. DOI: 10.1109/WSC.2004.1371561
34. Tsagkaris, K., A. Galani, P. Demestichas, G. Nguengang and M. Bouet et al., 2012. Identifying standardization opportunities of an operator-driven, framework for unifying autonomic network and service management. Proceedings of the IEEE International Conference on Communications, IEEE Xplore Press, Ottawa, pp: 6921-6925. DOI: 10.1109/ICC.2012.6364850
35. Xiao, Z., C. Liu and C. Chen, 2009. An anomaly detection scheme based on machine learning for WSN. Proceedings of the 1st International Conference on Information Science and Engineering, Dec. 26-28, IEEE Xplore Press, Nanjing, pp: 3959-396 2. DOI: 10.1109/ICISE.2009.235
36. Zarpelão, B.B., L.D.S. Mendes and M.L. Proença Jr.,2007. Anomaly detection aiming pro-active management of computer network based on digital signature of network segment. J. Netw. Syst. Manage., 15: 267-83. DOI: 10.1007/s10922-007-9064-y
37. Zarpelao, B.B., L.S. Mendes, M.L. Proenca and J.J.P.C. Rodrigues, 2009. Parameterized anomaly detection system with automatic configuration. Proceedings of the IEEE Global Telecommunications Conference, Nov. 30-Dec. 4, IEEE Xplore Press, Honolulu, pp: 1-6. DOI: 10.1109/GLOCOM.2009.5426189