Anomaly Detections in Internet traffic Using Empirical Measures

2013/08/24 by A. S. Syed Navaz, Navaz, A. S. Syed, S. Gopalakrishnan +4
Computer Science · #FOS: Computer and information sciences #Internet Traffic Analysis and Secure E-voting #Network Packet Processing and Optimization #Network Security and Intrusion Detection #Networking and Internet Architecture (cs.NI) #cs.NI

paper · pdf · doi:10.48550/arxiv.1308.5310

4 Pages

arxiv created 2013/08/24 · openalex publication_date 2013/08/24 · arxiv updated 2013/08/27 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

Introducing Internet traffic anomaly detection mechanism based on large deviations results for empirical measures. Using past traffic traces we characterize network traffic during various time-of-day intervals, assuming that it is anomaly-free. Throughout, we compare the two approaches presenting their advantages and disadvantages to identify and classify temporal network anomalies. We also demonstrate how our framework can be used to monitor traffic from multiple network elements in order to identify both spatial and temporal anomalies. We validate our techniques by analyzing real traffic traces with time-stamped anomalies.

Related

• Network Traffic Anomalies Detection and Identification with Flow Monitoring
• Anomaly Detection in Dynamic Networks of Varying Size
• CESNET-TimeSeries24: Time Series Dataset for Network Traffic Anomaly Detection and Forecasting
• Time Series Anomaly Detection; Detection of anomalous drops with limited features and sparse examples in noisy highly periodic data
• Network Traffic Decomposition for Anomaly Detection