Title :
A fast method for real-time anomaly detection using routing statistics
Author_Institution :
Texas A&M Univ., College Station, TX
Abstract :
The detection of network anomalies is an important tool for network managers and service providers. Network anomalies can indicate the onset of a new virus or a directed malicious attack. In this paper, we present a fast method for detecting network anomalies at a router. Our algorithm can be easily integrated into a router´s preexisting firmware with minimum modifications. In addition, its low memory and CPU requirements facilitate real-time anomaly detection.
Keywords :
security of data; telecommunication network routing; telecommunication security; malicious attack; network anomaly detection; real-time anomaly detection; routing statistics; Communication networks; Costs; IP networks; Microprogramming; Payloads; Quality of service; Routing; Statistics; Telecommunication traffic; Viruses (medical);
Conference_Titel :
INFOCOM Workshops 2008, IEEE
Conference_Location :
Phoenix, AZ
Print_ISBN :
978-1-4244-2219-7
DOI :
10.1109/INFOCOM.2008.4544604