Adaptive Traffic Modelling for Network Anomaly Detection

Vassilios C. Moussas ()
Additional contact information
Vassilios C. Moussas: Department of Civil Engineering, University of West Attica

A chapter in Modern Discrete Mathematics and Analysis, 2018, pp 333-351 from Springer

Abstract: Abstract With the rapid expansion of computer networks, security has become a crucial issue, either for small home networks or large corporate intranets. A standard way to detect illegitimate use of a network is through traffic monitoring. Consistent modelling of typical network activity can help separate the normal use of the network from an intruder activity or an unusual user activity. In this work an adaptive traffic modelling and estimation method for detecting network unusual activity, network anomaly or intrusion is presented. The proposed method uses simple and widely collected sets of traffic data, such as bandwidth utilization. The advantage of the method is that it builds the traffic patterns using data found easily by polling a network node MIB. The method was tested using real traffic data from various network segments in our university campus. The method performed equally well either offline or in real time, running at a fraction of the smallest sampling interval set by the network monitoring programs. The implemented adaptive multi-model partitioning algorithm was able to identify successfully all typical or unusual activities contained in the test datasets.

Keywords: Traffic modelling; Fault detection; Anomaly detection; Network simulation; Adaptive estimation; Forecasting; SARIMA models; Nonlinear time series; State-space models; Kalman filter; Multi-model (search for similar items in EconPapers)
Date: 2018
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:spochp:978-3-319-74325-7_17

Ordering information: This item can be ordered from
http://www.springer.com/9783319743257

DOI: 10.1007/978-3-319-74325-7_17

Access Statistics for this chapter

More chapters in Springer Optimization and Its Applications from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().