论文信息 - The Study of Traffic Flow Anomalies in a LAN

The Study of Traffic Flow Anomalies in a LAN

In the paper self-similarity of traffic flows in local area network is compared in the normal operation environment and in the presence of malicious traffic like attacks, virus activity and spam. The Hurst parameter has been used in this comparison. The results shows that this parameter is changing when malicious traffic is added to normal traffic. Therefore it has been concluded that this method can be used to detect malicious traffic in local are networks.

Janusz Kolbusz | Janusz Korniak

[1] Houssain Kettani,et al. A novel approach to the estimation of the Hurst parameter in self-similar traffic , 2002, 27th Annual IEEE Conference on Local Computer Networks, 2002. Proceedings. LCN 2002..

[2] Adrian Popescu,et al. Traffic Self-Similarity , 2001 .

[3] Adeel Akram,et al. Comparative Evaluation of Header vs. Payload based Network Anomaly Detectors , 2009 .

[4] J. S. Marron,et al. On the wavelet spectrum diagnostic for Hurst parameter estimation in the analysis of Internet traffic , 2005, Comput. Networks.

[5] Dewan Md. Farid,et al. Anomaly Network Intrusion Detection Based on Improved Self Adaptive Bayesian Algorithm , 2010, J. Comput..

[6] Mohammad Zulkernine,et al. Random-Forests-Based Network Intrusion Detection Systems , 2008, IEEE Transactions on Systems, Man, and Cybernetics, Part C (Applications and Reviews).