Baseline Profile Stability for Network Anomaly Detection

Network attacks are commonplace in the Internet. One of the defense mechanisms against the network attacks is using a baseline profile established during normal operation to detect the traffic that deviates from the baseline profile. However, this approach works only if there is a stable base profile representing the legitimate network traffic. Although there has been some preliminary research, the details of profiling, such as the profile format, its size and the traffic stability by site or time, have not been widely available. In this study, we analyze actual traffic traces from two Internet traffic archives and verify the traffic stability by various aspects. The analysis shows that there are significant differences in the traffic patterns among different sites. In addition, there are some differences between different time of day or different days, even within a site, suggesting that different profiles are needed for different times. The result of this study can be used practically to anomaly-based IDS for determining the stability of the traffic for a particular site, and the number of required traffic profiles based on the traffic patterns.

並列關鍵字

Denial-of-Service Attack ； Internet traffic profile ； network security

被引用紀錄

歐咨宏（2012）。風力機葉片應變之遠端監控系統結合自充式電源採集技術研究〔碩士論文，國立交通大學〕。華藝線上圖書館。https://doi.org/10.6842/NCTU.2012.00272

黃頂科（2014）。1.8伏特十位元連續逼近式類比數位轉換器設計與製作〔碩士論文，國立虎尾科技大學〕。華藝線上圖書館。https://doi.org/10.6827/NFU.2014.00114

杜政憲（2011）。新型雙搖臂式汽門機構的設計與動態模擬分析〔碩士論文，國立虎尾科技大學〕。華藝線上圖書館。https://doi.org/10.6827/NFU.2011.00013

康閎森（2012）。二氧化碲電阻式記憶體之研究〔碩士論文，國立臺灣大學〕。華藝線上圖書館。https://doi.org/10.6342/NTU.2012.03175

陳裕智（2010）。使用ADAMS在新型雙搖臂式無段可變正時與升程汽門機構動態模擬分析〔碩士論文，國立虎尾科技大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0028-0206201000423500

延伸閱讀

Jane, C. J. (2021). Analysis of Network Anomaly Data Mining Based on Association Rule Algorithm. International Journal of Uncertainty and Innovation Research, 3(2), 169-176. https://www.airitilibrary.com/Article/Detail?DocID=P20190619001-202108-202108040012-202108040012-169-176
Zhang, H. (2022). Research on Network Traffic Data Anomaly Identification and Detection Based on an Intrusion Detection Algorithm. International Journal of Network Security, 24(4), 689-694. https://doi.org/10.6633/IJNS.202207_24(4).11
江泓德（2020）。A Model Recommendation System for Anomaly Detection Algorithms〔碩士論文，淡江大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0002-2607202012332600
黃俊碩（2013）。Network traffic forecast and anomaly detection based on time series models〔碩士論文，國立屏東科技大學〕。華藝線上圖書館。https://doi.org/10.6346/NPUST.2013.00189
Qi, L., Zhan, S., Xiao, Y., Jie, H., Xie, Y. G., Zhe, Q., & Juan, W. (2014). A Simulation-based Approach to Acquire Information Security Baseline of Network Device. Information Engineering, 3(), 49-52. https://www.airitilibrary.com/Article/Detail?DocID=P20150609004-201412-201507270022-201507270022-49-52

國際替代計量

Baseline Profile Stability for Network Anomaly Detection

全文下載

主題瀏覽