Abstract
Recent works have shown that Internet traffics are self- similar over several time scales from microseconds to minutes. On the other hand, the dramatic expansion of Internet applications give rise to a fundamental challenge to the network security. This paper presents a statistical analysis of the Internet traffic Histogram Feature Vector, which can be applied to detect the traffic anomalies. Besides, the Variant Packet Sending-interval Link Padding based on heavy-tail distribution is proposed to defend the traffic analysis attacks in the low or medium speed anonymity system.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Paxson, V., Floyd, S.: Wide-area traffic: the failure of Poisson modeling. In: Proceedings of ACM Sigcomm, pp. 257–268 (1994)
Park, K., Willinger, W.: Self-similar network traffic and performance evaluation, pp. 17–19. John Wiley & Sons Inc., Chichester (2000)
Mark, E., Bestavroe, A.: Explaining World Wide Web Traffic Self-Similarity. Technical Report TR-95-015 (1995)
Sturges, H.: The choice of a class-interval. The American Statistical Association 21, 65–66 (1926)
Doane, D.: Aesthetic frequency classification. American Statistician 30, 181–183 (1976)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Yan, W. (2005). Measuring the Histogram Feature Vector for Anomaly Network Traffic. In: Hao, Y., et al. Computational Intelligence and Security. CIS 2005. Lecture Notes in Computer Science(), vol 3802. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11596981_41
Download citation
DOI: https://doi.org/10.1007/11596981_41
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-30819-5
Online ISBN: 978-3-540-31598-8
eBook Packages: Computer ScienceComputer Science (R0)