NDLI: Challenging the supremacy of traffic matrices in anomaly detection

Please wait, while we are loading the content...

I tube, you tube, everybody tubes: analyzing the world's largest user generated content video system

Characterizing residential broadband networks

Cryptographic strength of ssl/tls servers: current and recent practices

A global view of kad

Issues and etiquette concerning use of shared measurement data

Measuring load-balanced paths in the internet

Networkmd: topology inference and failure diagnosis in the last mile

Network loss inference with second order statistics of end-to-end flows

Algorithms and estimators for accurate summarization of internet traffic

An active measurement system for shared environments

Understanding wifi-based connectivity from moving vehicles

Interference map for 802.11 networks

Legal issues surrounding monitoring during network research

Youtube traffic characterization: a view from the edge

Understanding passive and active service discovery

Using uncleanliness to predict future botnet addresses

The web is smaller than it seems

Diversity of forwarding paths in pocket switched networks

Inferring subnets in router-level topology collection studies

Compressed network monitoring for ip and all-optical networks

A data streaming algorithm for estimating entropies of od flows

Network monitoring using traffic dispersion graphs (tdgs)

Studying wireless routing link metric dynamics

Understanding the limitations of transmit power control for indoor wlans

Measurement and analysis of online social networks

Usage-based dhcp lease time optimization

Challenging the supremacy of traffic matrices in anomaly detection

Profiling a million user dht

Towards network triangle inequality violation aware distributed systems

Learning network structure from passive measurements

Quality-of-service class specific traffic matrices in ip/mpls networks

On optimal probing for delay and loss measurement

Understanding handoffs in large ieee 802.11 wireless networks

Passive online rogue access point detection using sequential hypothesis testing with TCP ACK-pairs

A brief history of scanning

Analysis of internet backbone traffic and header anomalies observed

On the impact of route monitor selection

Blind source separation approach to performance diagnosis and dependency discovery

Acyclic type-of-relationship problems on the internet: an experimental analysis

Challenging the supremacy of traffic matrices in anomaly detection

Content Provider	ACM Digital Library
Author	Soule, Augustin Diot, Christophe Silveira, Fernando Ringberg, Haakon
Abstract	Multiple network-wide anomaly detection techniques proposed in the literature define an anomaly as a statistical outlier in aggregated network traffic. The most popular way to aggregate the traffic is as a Traffic Matrix, where the traffic is divided according to its ingress and egress points in the network. However, the reasons for choosing traffic matrices instead of any other formalism have not been studied yet. In this paper we compare three network-driven traffic aggregation formalisms: ingress routers, input links and origin-destination pairs (i.e. traffic matrices). Each formalism is computed on data collected from two research backbones. Then, a network-wide anomaly detection method is applied to each formalism. All anomalies are manually labeled, as a true or false positive. Our results show that the traffic aggregation level has asignificant impact on the number of anomalies detected and on the false positive rate. We show that aggregating by OD pairs is indeed the most appropriate choice for the data sets and the detection method we consider. We correlate our observations with time series statistics in order to explain how aggregation impacts anomaly detection.
Starting Page	105
Ending Page	110
Page Count	6
File Format	PDF
ISBN	9781595939081
DOI	10.1145/1298306.1298320
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-10-24
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Traffic aggregation Anomaly detection
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Challenging the supremacy of traffic matrices in anomaly detection

Anomaly Traffic Detection Model Based on Dynamic Aggregation

On the use of co-occurrence matrices for network anomaly detection

A semi-supervised model for network traffic anomaly detection

Model Aggregation for Distributed Content Anomaly Detection

Spatio-temporal compressive sensing and internet traffic matrices

State of the art analysis of network traffic anomaly detection

ABSTRACT Sensitivity of PCA for Traffic Anomaly Detection

Hadoop-based network traffic anomaly detection in backbone

Challenging the supremacy of traffic matrices in anomaly detection

Similar Documents

Challenging the supremacy of traffic matrices in anomaly detection

Anomaly Traffic Detection Model Based on Dynamic Aggregation

On the use of co-occurrence matrices for network anomaly detection

A semi-supervised model for network traffic anomaly detection

Model Aggregation for Distributed Content Anomaly Detection

Spatio-temporal compressive sensing and internet traffic matrices

State of the art analysis of network traffic anomaly detection

ABSTRACT Sensitivity of PCA for Traffic Anomaly Detection

Hadoop-based network traffic anomaly detection in backbone

Challenging the supremacy of traffic matrices in anomaly detection