2007, English, Article edition: Sketch based Anomaly Detection, Identification and Performance Evaluation Abry, Patrice; Borgnat, Pierre; Dewaele, Guillaume

User activity

Share to:
 
Bookmark: http://trove.nla.gov.au/version/203606
Physical Description
  • text
Published
  • HAL - CCSD
  • 2007
Language
  • English

Edition details

Title
  • Sketch based Anomaly Detection, Identification and Performance Evaluation
Author
  • Abry, Patrice
  • Borgnat, Pierre
  • Dewaele, Guillaume
Published
  • HAL - CCSD
  • 2007
Physical Description
  • text
Subjects
Notes
  • An anomaly detection procedure is defined and its statistical performance are carefully quantified. It is based on a non Gaussian modeling of the marginal distributions of random projections (sketches) of traffic aggregated jointly at different levels (multiresolution). To evaluate false negative vs. false positive in a controlled, reproducible and documented framework, we apply the detection procedure to traffic time-series from our self-made anomaly database. It is obtained by performing DDoS-type attacks, using real-world attack tools, over a real operational network. Also, we illustrate that combining sketches enables us to identify the target IP destination address and faulty packets hence opening the track to attack mitigation.
  • HAL:ensl-00175474, version 1
  • HAL:http:/​/​prunel.ccsd.cnrs.fr/​ensl-00175474/​en/​
Language
  • English
Contributed by
OAIster

Get this edition

  • Set up My libraries

    How do I set up "My libraries"?

    In order to set up a list of libraries that you have access to, you must first login or sign up. Then set up a personal list of libraries from your profile page by clicking on your user name at the top right of any screen.

  • All (1)
  • Unknown (1)
None of your libraries hold this item.
None of your libraries hold this item.
None of your libraries hold this item.
None of your libraries hold this item.
None of your libraries hold this item.
None of your libraries hold this item.
None of your libraries hold this item.
None of your libraries hold this item.

User activity


e.g. test cricket, Perth (WA), "Parkes, Henry"

Separate different tags with a comma. To include a comma in your tag, surround the tag with double quotes.

Be the first to add a tag for this edition

Be the first to add this to a list

Comments and reviews

What are comments? Add a comment

No user comments or reviews for this version

Add a comment