[PDF][PDF] Machine learning approaches to network anomaly detection

T Ahmed, B Oreshkin, M Coates - … of the 2nd USENIX workshop on …, 2007 - usenix.org
Proceedings of the 2nd USENIX workshop on Tackling computer systems problems …, 2007usenix.org
Networks of various kinds often experience anoma-lous behaviour. Examples include
attacks or large data transfers in IP networks, presence of intruders in distributed video
surveillance systems, and an automobile accident or an untimely congestion in a road
network. Machine learning techniques enable the development of anomaly detection
algorithms that are non-parametric, adaptive to changes in the characteristics of normal
behaviour in the relevant network, and portable across applications. In this paper we use …
Abstract
Networks of various kinds often experience anoma-lous behaviour. Examples include attacks or large data transfers in IP networks, presence of intruders in distributed video surveillance systems, and an automobile accident or an untimely congestion in a road network. Machine learning techniques enable the development of anomaly detection algorithms that are non-parametric, adaptive to changes in the characteristics of normal behaviour in the relevant network, and portable across applications. In this paper we use two different datasets, pictures of a highway in Quebec taken by a network of webcams and IP traffic statistics from the Abilene network, as examples in demonstrating the applicability of two machine learning algorithms to network anomaly detection. We investigate the use of the block-based One-Class Neighbour Machine and the recursive Kernel-based Online Anomaly Detection algorithms.
usenix.org
以上显示的是最相近的搜索结果。 查看全部搜索结果