NDLI: Traffic anomaly based detection: Anomaly detection by self-similar analysis

Content Provider	IEEE Xplore Digital Library
Author	Nurohman, H. Purwanto, Y. Hafidudin
Copyright Year	2015
Description	Author affiliation: Dept. of Electr., Eng., Telkom Univ. Bandung, Bandung, Indonesia (Hafidudin) \|\| Dept. of Comput. Eng., Telkom Univ., Bandung, Indonesia (Nurohman, H.; Purwanto, Y.)
Abstract	Denial of Service (DoS) is a hot topic phenomenon lately. The intensity of DoS attacks increasing every day with the discovery of a new attack with the same type which is Distributed Denial of Service (DDoS). Both, attack the victims by flooding a lot of packet to the traffic channels at a time. This makes the flow of packets to the victim's becomes choked and victim do not get the desired package because the density of traffic on its network. Traffic anomaly based is a good technique to detect DDoS attack. Traffic anomaly can be used by several method. One of them is self-similarity. Self-Similarity methods is suitable to the network traffic behaviour. Self-Similarity is a scale of invariant which always have the same. Today, self-similarity has been a dominant framework for modelling network traffic. It will show a plot of the traffic will have in common, even though it has a different time. For the result we use kolmogorv-smirnov to differentiate the anomaly and normal condition in each step of self-similarity. In normal condition Kolmogorov-smirnov test always give 0 and for anomaly condition give 1 for each step. 0 means that data were analysed didn't have a large difference. Otherwise data have a large difference. Hurst estimator provide 0,645 for normal condition. For anomaly condition, hurst estimator provide 1,443. This is compatible with previous research which states that the hurst exponent from nomal traffic will provide value between 0,5<;H<;1. And the anomaly traffic is outside the range.
Starting Page	1
Ending Page	6
File Size	559659
Page Count	6
File Format	PDF
e-ISBN	9781479989751
DOI	10.1109/ICCEREC.2015.7337024
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-08-27
Publisher Place	Indonesia
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computers Renewable energy sources Burstiness Estimation Telecommunication traffic Self-Similarity Anomaly Internet DDoS Mathematical model Computer crime
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Detecting DDoS Attack Based on Empirical Mode Decomposition

Volume based anomaly detection using LRD analysis of decomposed network traffic

Discriminating DDoS attack traffic from flash crowd through packet arrival patterns

Real-Time Diagnosis of Network Anomaly Based on Statistical Traffic Analysis

Network Traffic Anomaly Detection Based on Self-Similarity Using HHT and Wavelet Transform

An approach to realize the existence of self-similarity in the network data traffic of the University of Dhaka

Detection of Low-rate DDoS Attack Based on Self-Similarity

Research on Method of Network Abnormal Detection Based on Hurst Parameter Estimation

A Heuristic DDoS Flooding Attack Detection Mechanism Analyses based on the Relationship between Input and Output Traffic Volumes

Traffic anomaly based detection: Anomaly detection by self-similar analysis

Similar Documents

Detecting DDoS Attack Based on Empirical Mode Decomposition

Volume based anomaly detection using LRD analysis of decomposed network traffic

Discriminating DDoS attack traffic from flash crowd through packet arrival patterns

Real-Time Diagnosis of Network Anomaly Based on Statistical Traffic Analysis

Network Traffic Anomaly Detection Based on Self-Similarity Using HHT and Wavelet Transform

An approach to realize the existence of self-similarity in the network data traffic of the University of Dhaka

Detection of Low-rate DDoS Attack Based on Self-Similarity

Research on Method of Network Abnormal Detection Based on Hurst Parameter Estimation

A Heuristic DDoS Flooding Attack Detection Mechanism Analyses based on the Relationship between Input and Output Traffic Volumes

Traffic anomaly based detection: Anomaly detection by self-similar analysis