NDLI: Combining filtering and statistical methods for anomaly detection

Please wait, while we are loading the content...

Measurement-based characterization of a collection of on-line games

A first look at modern enterprise traffic

Client behavior and feed characteristics of RSS, a publish-subscribe system for web micronews

Measurements, analysis, and modeling of BitTorrent-like systems

Characterizing unstructured overlay topologies in modern P2P file-sharing systems

Should internet service providers fear peer-assisted content distribution?

Joint data streaming and sampling techniques for detection of super sources and destinations

Optimal combination of sampled network measurements

The power of slicing in internet flow measurement

Poisson versus periodic path probing (or, does PASTA matter?)

On the accuracy of embeddings for internet coordinate systems

An empirical approach to modeling inter-AS traffic matrices

Geographic locality of IP prefixes

An information-theoretic approach to network monitoring and measurement

Multi-hop probing asymptotics in available bandwidth estimation: stochastic analysis

Exploiting internet route sharing for large scale available bandwidth estimation

Inferring and debugging path MTU discovery failures

Characterization and measurement of TCP traversal through NATs and firewalls

Predicting short-transfer latency from TCP arcana: a trace-based validation

Novel approaches to end-to-end packet reordering measurement

Data reduction for the scalable automated analysis of distributed darknet traffic

Sparse approximations for high fidelity compression of network traffic data

Building a time machine for efficient recording and retrieval of high-volume network traffic

Improving sketch reconstruction accuracy using linear least squares method

Understanding congestion in IEEE 802.11b wireless networks

Facilitating access point selection in IEEE 802.11 wireless networks

Eliminating handoff latencies in 802.11 WLANs using multiple radios: applications, experience, and evaluation

Estimation of link interference in static multi-hop wireless networks

Exploiting partially overlapping channels in wireless networks: turning a peril into an advantage

Network anomography

Combining filtering and statistical methods for anomaly detection

Detecting anomalies in network traffic using maximum entropy estimation

Exploiting underlying structure for detailed reconstruction of an internet-scale event

Collaborating against common enemies

Perils of transitive trust in the domain name system

Flooding attacks by exploiting persistent forwarding loops

Combining filtering and statistical methods for anomaly detection

Content Provider	ACM Digital Library
Author	Soule, Augustin Salamatian, Kavé Taft, Nina
Abstract	In this work we develop an approach for anomaly detection for large scale networks such as that of an enterprize or an ISP. The traffic patterns we focus on for analysis are that of a network-wide view of the traffic state, called the traffic matrix. In the first step a Kalman filter is used to filter out the "normal" traffic. This is done by comparing our future predictions of the traffic matrix state to an inference of the actual traffic matrix that is made using more recent measurement data than those used for prediction. In the second step the residual filtered process is then examined for anomalies. We explain here how any anomaly detection method can be viewed as a problem in statistical hypothesis testing. We study and compare four different methods for analyzing residuals, two of which are new. These methods focus on different aspects of the traffic pattern change. One focuses on instantaneous behavior, another focuses on changes in the mean of the residual process, a third on changes in the variance behavior, and a fourth examines variance changes over multiple timescales. We evaluate and compare all of these methods using ROC curves that illustrate the full tradeoff between false positives and false negatives for the complete spectrum of decision thresholds.
Starting Page	31
Ending Page	31
Page Count	1
File Format	PDF
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2005-10-19
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Combining multiresolution and random projections for robust statistical analysis and anomaly detection

Abstract Combining Filtering and Statistical Methods for Anomaly Detection

Abstract combining filtering and statistical methods for anomaly detection.

A Filtering Approach To Anomaly and Masquerade Detection

Combining wavelet analysis and information theory for network anomaly detection

Combining density-based clustering and wavelet methods for internal systems anomaly detection

Combining statistical and spectral analysis techniques in network traffic anomaly detection

Combining incremental Hidden Markov Model and Adaboost algorithm for anomaly intrusion detection

Statistical Methods in Prediction, Filtering, and Detection Problems

Combining filtering and statistical methods for anomaly detection

Similar Documents

Combining multiresolution and random projections for robust statistical analysis and anomaly detection

Abstract Combining Filtering and Statistical Methods for Anomaly Detection

Abstract combining filtering and statistical methods for anomaly detection.

A Filtering Approach To Anomaly and Masquerade Detection

Combining wavelet analysis and information theory for network anomaly detection

Combining density-based clustering and wavelet methods for internal systems anomaly detection

Combining statistical and spectral analysis techniques in network traffic anomaly detection

Combining incremental Hidden Markov Model and Adaboost algorithm for anomaly intrusion detection

Statistical Methods in Prediction, Filtering, and Detection Problems

Combining filtering and statistical methods for anomaly detection