Sorry, you need to enable JavaScript to visit this website.

facebooktwittermailshare

Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts

Abstract: 

Internet traffic monitoring is a crucial task for network security. Self-similarity, a key property for a relevant description of internet traffic statistics, has already been massively and successfully involved in anomaly detection. Self-similar analysis was however so far applied either to byte or Packet count time series independently, while both signals are jointly collected and technically deeply related. The present contribution elaborates on a recently proposed multivariate self-similar model, Operator fractional Brownian Motion (OfBm), to
analyze jointly self-similarity in bytes and packets. A non-linear regression procedure, based on an original Branch & Bound resolution procedure, is devised for the full identification of bivariate OfBm. The estimation performance is assessed by means of Monte Carlo simulations. Further, an Internet traffic anomaly detection procedure is proposed, that makes use of the vector of Hurst exponents underlying the OfBm based Internet data modeling. Applied to a large set of high quality and modern Internet data from the MAWI repository, proof-of-concept results in anomaly detection are detailed and discussed.

up
0 users have voted:

Paper Details

Authors:
Jordan Frecon , Romain Fontugne , Gustavo Didier , Nelly Pustelnik , Kensuke Fukuda , Patrice Abry
Submitted On:
24 March 2016 - 10:00am
Short Link:
Type:
Presentation Slides
Event:
Presenter's Name:
Jordan Frecon
Paper Code:
SPTM-L9.2
Document Year:
2016
Cite

Document Files

2016_ICASSP_talk.pdf

(294 downloads)

Subscribe

[1] Jordan Frecon , Romain Fontugne , Gustavo Didier , Nelly Pustelnik , Kensuke Fukuda , Patrice Abry, "Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts", IEEE SigPort, 2016. [Online]. Available: http://sigport.org/1023. Accessed: May. 27, 2018.
@article{1023-16,
url = {http://sigport.org/1023},
author = {Jordan Frecon ; Romain Fontugne ; Gustavo Didier ; Nelly Pustelnik ; Kensuke Fukuda ; Patrice Abry },
publisher = {IEEE SigPort},
title = {Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts},
year = {2016} }
TY - EJOUR
T1 - Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts
AU - Jordan Frecon ; Romain Fontugne ; Gustavo Didier ; Nelly Pustelnik ; Kensuke Fukuda ; Patrice Abry
PY - 2016
PB - IEEE SigPort
UR - http://sigport.org/1023
ER -
Jordan Frecon , Romain Fontugne , Gustavo Didier , Nelly Pustelnik , Kensuke Fukuda , Patrice Abry. (2016). Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts. IEEE SigPort. http://sigport.org/1023
Jordan Frecon , Romain Fontugne , Gustavo Didier , Nelly Pustelnik , Kensuke Fukuda , Patrice Abry, 2016. Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts. Available at: http://sigport.org/1023.
Jordan Frecon , Romain Fontugne , Gustavo Didier , Nelly Pustelnik , Kensuke Fukuda , Patrice Abry. (2016). "Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts." Web.
1. Jordan Frecon , Romain Fontugne , Gustavo Didier , Nelly Pustelnik , Kensuke Fukuda , Patrice Abry. Non-linear regression for bivariate self-similarity identification - application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts [Internet]. IEEE SigPort; 2016. Available from : http://sigport.org/1023