Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach

The crucial future role of Internet in society makes of network monitoring a critical issue for network operators in future network scenarios. The Future Internet will have to cope with new and different anomalies, motivating the development of accurate detection algorithms. This paper presents a no...

وصف كامل

محفوظ في:
التفاصيل البيبلوغرافية
المؤلف الرئيسي: Casas, Pedro (author)
مؤلفون آخرون: Fillatre, Lionel (author), Vaton, Sandrine (author), Nikiforov, Igor (author)
التنسيق: bookPart
اللغة:الإنجليزية
منشور في: 2009
الموضوعات:
الوصول للمادة أونلاين:https://hdl.handle.net/20.500.12008/38649
https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7
الوسوم: إضافة وسم
لا توجد وسوم, كن أول من يضع وسما على هذه التسجيلة!
_version_ 1868890115737124864
author Casas, Pedro
author2 Fillatre, Lionel
Vaton, Sandrine
Nikiforov, Igor
author2_role author
author
author
author_browse Casas, Pedro
Fillatre, Lionel
Nikiforov, Igor
Vaton, Sandrine
author_facet Casas, Pedro
Fillatre, Lionel
Vaton, Sandrine
Nikiforov, Igor
author_role author
collection COLIBRI
dc.creator.none.fl_str_mv Casas, Pedro
Fillatre, Lionel
Vaton, Sandrine
Nikiforov, Igor
dc.date.none.fl_str_mv 2009
2023-08-01T20:33:10Z
2023-08-01T20:33:10Z
20230801
dc.identifier.none.fl_str_mv Casas, P. Fillatre, L. Vaton, S, Nikiforov, I. “Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach.” Traffic Management and Traffic Engineering for the Future Internet. First Euro-NF Workshop, FITraMEn 2008 Porto, Portugal, December 2008. Revised Selected Papers. Berlin : Springer Verlag, 2009. Lecture Notes in Computer Science. 5464. ISBN 978-3-642-04575-2. https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7
https://hdl.handle.net/20.500.12008/38649
https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7
dc.language.none.fl_str_mv en
eng
dc.publisher.none.fl_str_mv Springer
dc.relation.none.fl_str_mv Traffic Management and Traffic Engineering for the Future Internet. First Euro-NF Workshop, FITraMEn 2008 Porto, Portugal, December 2008. Revised Selected Papers.
dc.rights.none.fl_str_mv info:eu-repo/semantics/openAccess
Licencia Creative Commons Atribución - No Comercial - Sin Derivadas (CC - By-NC-ND 4.0)
dc.source.none.fl_str_mv reponame:COLIBRI
instname:Universidad de la República
instacron:Universidad de la República
dc.subject.none.fl_str_mv Network monitoring and traffic analysis
Network traffic modeling
Optimal volume anomaly detection
Telecomunicaciones
dc.title.none.fl_str_mv Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
dc.type.none.fl_str_mv Capítulo de libro
info:eu-repo/semantics/bookPart
info:eu-repo/semantics/publishedVersion
description The crucial future role of Internet in society makes of network monitoring a critical issue for network operators in future network scenarios. The Future Internet will have to cope with new and different anomalies, motivating the development of accurate detection algorithms. This paper presents a novel approach to detect unexpected and large traffic variations in data networks. We introduce an optimal volume anomaly detection algorithm in which the anomaly-free traffic is treated as a nuisance parameter. The algorithm relies on an original parsimonious model for traffic demands which allows detecting anomalies from link traffic measurements, reducing the overhead of data collection. The performance of the method is compared to that obtained with the Principal Components Analysis (PCA) approach. We choose this method as benchmark given its relevance in the anomaly detection literature. Our proposal is validated using data from an operational network, showing how the method outperforms the PCA approach
eu_rights_str_mv openAccess
format bookPart
id anni_86b3375ea2d32dca84046ed9147f32ce
identifier_str_mv Casas, P. Fillatre, L. Vaton, S, Nikiforov, I. “Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach.” Traffic Management and Traffic Engineering for the Future Internet. First Euro-NF Workshop, FITraMEn 2008 Porto, Portugal, December 2008. Revised Selected Papers. Berlin : Springer Verlag, 2009. Lecture Notes in Computer Science. 5464. ISBN 978-3-642-04575-2. https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7
instacron_str Universidad de la República
institution Universidad de la República
instname_str Universidad de la República
language eng
language_invalid_str_mv en
network_acronym_str anni
network_name_str oai-lr-anni
oai_identifier_str oai:colibri.udelar.edu.uy:20.500.12008/38649
publishDate 2009
publishDateSort 2009
publisher.none.fl_str_mv Springer
reponame_str COLIBRI
repository.mail.fl_str_mv
repository.name.fl_str_mv
repository_id_str
rights_invalid_str_mv Licencia Creative Commons Atribución - No Comercial - Sin Derivadas (CC - By-NC-ND 4.0)
spelling Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approachCasas, PedroFillatre, LionelVaton, SandrineNikiforov, IgorNetwork monitoring and traffic analysisNetwork traffic modelingOptimal volume anomaly detectionTelecomunicacionesThe crucial future role of Internet in society makes of network monitoring a critical issue for network operators in future network scenarios. The Future Internet will have to cope with new and different anomalies, motivating the development of accurate detection algorithms. This paper presents a novel approach to detect unexpected and large traffic variations in data networks. We introduce an optimal volume anomaly detection algorithm in which the anomaly-free traffic is treated as a nuisance parameter. The algorithm relies on an original parsimonious model for traffic demands which allows detecting anomalies from link traffic measurements, reducing the overhead of data collection. The performance of the method is compared to that obtained with the Principal Components Analysis (PCA) approach. We choose this method as benchmark given its relevance in the anomaly detection literature. Our proposal is validated using data from an operational network, showing how the method outperforms the PCA approachSpringer2023-08-01T20:33:10Z2023-08-01T20:33:10Z200920230801Capítulo de libroinfo:eu-repo/semantics/bookPartinfo:eu-repo/semantics/publishedVersionCasas, P. Fillatre, L. Vaton, S, Nikiforov, I. “Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach.” Traffic Management and Traffic Engineering for the Future Internet. First Euro-NF Workshop, FITraMEn 2008 Porto, Portugal, December 2008. Revised Selected Papers. Berlin : Springer Verlag, 2009. Lecture Notes in Computer Science. 5464. ISBN 978-3-642-04575-2. https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7https://hdl.handle.net/20.500.12008/38649https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7reponame:COLIBRIinstname:Universidad de la Repúblicainstacron:Universidad de la RepúblicaenengTraffic Management and Traffic Engineering for the Future Internet. First Euro-NF Workshop, FITraMEn 2008 Porto, Portugal, December 2008. Revised Selected Papers.Las obras depositadas en el Repositorio se rigen por la Ordenanza de los Derechos de la Propiedad Intelectual de la Universidad De La República. (Res. Nº 91 de C.D.C. de 8/III/1994 – D.O. 7/IV/1994) y por la Ordenanza del Repositorio Abierto de la Universidad de la República (Res. Nº 16 de C.D.C. de 07/10/2014)info:eu-repo/semantics/openAccessLicencia Creative Commons Atribución - No Comercial - Sin Derivadas (CC - By-NC-ND 4.0)oai:colibri.udelar.edu.uy:20.500.12008/386492026-04-14T10:15:28Z
spellingShingle Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
Casas, Pedro
Network monitoring and traffic analysis
Network traffic modeling
Optimal volume anomaly detection
Telecomunicaciones
status_str publishedVersion
title Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
title_full Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
title_fullStr Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
title_full_unstemmed Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
title_short Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
title_sort Volume anomaly detection in data networks : an optimal detection algorithm vs. the PCA approach
topic Network monitoring and traffic analysis
Network traffic modeling
Optimal volume anomaly detection
Telecomunicaciones
url https://hdl.handle.net/20.500.12008/38649
https://doi-org.proxy.timbo.org.uy/10.1007/978-3-642-04576-9_7