Loading [a11y]/accessibility-menu.js
A fast algorithm for detecting anomalous changes in network traffic | IEEE Conference Publication | IEEE Xplore

A fast algorithm for detecting anomalous changes in network traffic


Abstract:

Anomalies in communication network traffic caused by malware or denial-of-service attacks manifest themselves in structural changes in the covariance matrix of traffic fe...Show More

Abstract:

Anomalies in communication network traffic caused by malware or denial-of-service attacks manifest themselves in structural changes in the covariance matrix of traffic features. Real-time detection of anomalies in high-dimensional data demands a very efficient algorithm to identify these changes in a compact low-dimensional representation. This paper presents an efficient algorithm for the rapid detection of structural differences between two covariance matrices, as measured by the maximum possible angle between the subspaces specified by subsets of the two sets of principal components of the matrices. We show that our algorithm achieves a significantly lower computational complexity compared to a naive approach. Finally, we apply our results to real traffic traces from Internet backbone links and show that our approach offers a substantial reduction in the computational overhead of anomaly detection.
Date of Conference: 09-13 November 2015
Date Added to IEEE Xplore: 04 January 2016
ISBN Information:
Conference Location: Barcelona, Spain

References

References is not available for this document.