Detection and localization of change-points in high-dimensional network traffic data

Details Detection and localization of change-points in high-dimensional network traffic data Detection and localization of change-points in high-dimensional network traffic data

2009-08-17

arxiv.org/abs/0908.2310v1

Annals of Applied Statistics 2009, Vol. 3, No. 2, 637-662

Statistics

Applications

Published in at http://dx.doi.org/10.1214/08-AOAS232 the Annals of Applied Statistics (http://www.imstat.org/aoas/) by the Ins

Scientific paper

10.1214/08-AOAS232

We propose a novel and efficient method, that we shall call TopRank in the following paper, for detecting change-points in high-dimensional data. This issue is of growing concern to the network security community since network anomalies such as Denial of Service (DoS) attacks lead to changes in Internet traffic. Our method consists of a data reduction stage based on record filtering, followed by a nonparametric change-point detection test based on $U$-statistics. Using this approach, we can address massive data streams and perform anomaly detection and localization on the fly. We show how it applies to some real Internet traffic provided by France-T\'el\'ecom (a French Internet service provider) in the framework of the ANR-RNRT OSCAR project. This approach is very attractive since it benefits from a low computational load and is able to detect and localize several types of network anomalies. We also assess the performance of the TopRank algorithm using synthetic data and compare it with alternative approaches based on random aggregation.

Affiliated with

Also associated with

No associations

Rating

Detection and localization of change-points in high-dimensional network traffic data does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Detection and localization of change-points in high-dimensional network traffic data, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Detection and localization of change-points in high-dimensional network traffic data will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFWR-SCP-O-19344