A fast terminal sliding mode observer for TCP/IP network anomaly traffic detection

A fast terminal sliding mode (FTSM) observer is proposed to estimate the anomaly seen as an external disturbance perturbing into the queue dynamics in the TCP/IP networks. The TCP traffic dynamic behaviour, which is represented by a TCP/IP fluid-flow model, can be captured by the observer in the router level. A smooth control signal for the observer based on the fast TSM strategy is obtained and directly used to estimate the additional traffic dynamic in TCP/IP networks. The effectiveness and capability of the proposed methodology are evaluated in Network Simulator.