Anomaly detection algorithm based on fractal characteristics of large-scale network traffic
|更新时间:2024-10-14
|
Anomaly detection algorithm based on fractal characteristics of large-scale network traffic
Vol. 30, Issue 9, Pages: 43-53(2009)
作者机构:
1. 南京理工大学计算机科学与技术学院
2. 江苏大学现代教育技术中心
作者简介:
基金信息:
DOI:
CLC:TP393.08
Published:2009
稿件说明:
移动端阅览
XU Xiao-dong1, ZHU Shi-rui2, SUN Ya-min1. Anomaly detection algorithm based on fractal characteristics of large-scale network traffic[J]. 2009, 30(9): 43-53.
DOI:
XU Xiao-dong1, ZHU Shi-rui2, SUN Ya-min1. Anomaly detection algorithm based on fractal characteristics of large-scale network traffic[J]. 2009, 30(9): 43-53.DOI:
Anomaly detection algorithm based on fractal characteristics of large-scale network traffic
Based on the fractal structure of the large-scale network traffic aggregation
anomalies were analyzed qualitatively and quantitatively from perspective of the global and local scaling exponents.Multi-fractal singular spectrum and Lipschitz regularity distribution were used to analyze the fractal parameters of abnormal flow
trying to identify the relationship between the changes of these parameters and the emergence of anomalies.Experimental results show that the emergence of anomalies has obvious signs on the singular spectrum and Lipschitz regularity distribution.Using this feature
a new multi-fractal-based anomaly detection algorithm and a new detection framework were constructed.On the DARPA/Lincoln laboratory intrusion detection evaluation data set 1999
this algorithm’s detection rate is high at low false alarm rate