Research on Method of Network Abnormal Detection Based on Hurst Parameter Estimation

Most researches regard the real traffic has self-similarity, so traditional model based Possion or Markov canpsilat adapt to the real traffic. In this paper, the authors use the estimation based to Hurst parameter to detect Dos attack to research on the affect of Hurst parameter change brought by DoS attack. By analyzing the 1998 DARPA Intrusion Detection Evaluation dataset, it is verify that this method can detect DoS attack, and is more reliable on the recognition of all kinds of DoS attack than any other method based on measure precision.