The following information was submitted:
Transactions: WSEAS TRANSACTIONS ON INFORMATION SCIENCE AND APPLICATIONS
Transactions ID Number: 32-784
Full Name: Ming Yu
Position: Doctor (Researcher)
Age: ON
Sex: Male
Address: No.2 Linggong Road, Ganjingzi District, Dalian City, Liaoning Province, 116024
Country: CHINA
Tel:
Tel prefix:
Fax:
E-mail address: yu_ming1111@hotmail.com
Other E-mails: yu_ming1111@163.com
Title of the Paper: A Nonparametric Adaptive CUSUM Method for Anomaly Detection in Symmetric Network Traffic
Authors as they appear in the Paper: Ming Yu
Email addresses of all the authors:
Number of paper pages: 10
Abstract: Detecting anomalies that disrupt the symmetry in two-way communications is an important task for network defense systems. The subtlety and complexity of anomalous traffic challenge the existing detection methods, and the bottleneck is how to select thresholds to adapt to the variability in network traffic. In this paper, a nonparametric adaptive CUSUM (Cumulative Sum) method is presented to meet this challenge. It has three distinct features. (i) No assumption is made on the distribution of the observations. (ii) Its detection threshold is self-adjusted so that it can adapt itself to various traffic conditions. (iii) It can react to the end of an anomaly within a required delay time. Several practical expressions for evaluating this method on its probability of false alarms and detection delays are deduced. Experiments on source-end defense against SYN flooding attacks show the efficacy of this method in detecting low intensity anomalies.
Keywords: Anomaly detection; Adaptive detection; Nonparametric algorithm; Source-end defense; Network security; DDoS
EXTENSION of the file: .pdf
Special (Invited) Session:
Organizer of the Session:
How Did you learn about congress:
IP ADDRESS: 116.3.66.92
