Current studentsExisting staffContact us
 

Use of a cepstral information norm for anomaly detection in a BGP-inferred interent

Simple item page
dc.contributor.authorChiera, B.
dc.contributor.authorKraetzl, M.
dc.contributor.authorRoughan, M.
dc.contributor.authorWhite, L.
dc.contributor.conferenceAustralian Communication Theory Workshop (8th : 2007 : Adelaide, Australia)
dc.contributor.editorChiera, B.
dc.date.issued2007
dc.description.abstractIn this paper we use a particular type of mutual information norm — the cepstral information norm — for anomaly detection at the router level in the Internet. We combine the cepstral norm with a state space Kalman filter to define two distance metrics to capture anomalous behaviour. These metrics are implemented using a subspace-based model-free paradigm to aid realtime analysis. We infer a top level Internet topology using Border Gateway Protocol router updates and characterise the structural evolution of the network using a selection of graph metrics. Analysis over one week of non time-homogeneous updates, which includes The SQL Slammer worm event, shows the combined use of the two cepstral distance metrics detects the occurrence and severity of anomalous network events.
dc.description.statementofresponsibilityBelinda A. Chiera, Miro Kraetzl, Matthew Roughan and Langford B. White
dc.identifier.citationAustralian Communication Theory Workshop Proceedings 2007 / pp.116-121
dc.identifier.isbn1424407419
dc.identifier.orcidRoughan, M. [0000-0002-7882-7329]
dc.identifier.orcidWhite, L. [0000-0001-6660-0517]
dc.identifier.urihttp://hdl.handle.net/2440/44790
dc.language.isoen
dc.publisherIEEE
dc.publisher.placeCDROM
dc.rights© 2007 The Pennsylvania State University
dc.source.urihttp://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.71.5397
dc.subjectCepstral information norm
dc.subjectmutual information
dc.subjectKalman filter
dc.subjectsubspace-based model-free
dc.subjectanomaly detection
dc.titleUse of a cepstral information norm for anomaly detection in a BGP-inferred interent
dc.typeConference paper
pubs.publication-statusPublished

Files

Collections

Electrical and Electronic Engineering publications