Tuyển tập báo cáo các nghiên cứu khoa học quốc tế ngành hóa học dành cho các bạn yêu hóa học tham khảo đề tài: Research Article Detecting Distributed Network Traffic Anomaly with Network-Wide Correlation Analysis | Hindawi Publishing Corporation EURASIP Journal on Advances in Signal Processing Volume 2009 Article ID 752818 11 pages doi 2009 752818 Research Article Detecting Distributed Network Traffic Anomaly with Network-Wide Correlation Analysis Li Zonglin Hu Guangmin Yao Xingmiao and Yang Dan Key Lab of Broadband Optical Fiber Transmission and Communication Networks University of Electronic Science and Technology of China UESTC Chengdu 610054 China Correspondence should be addressed to Li Zonglin lizonglin@ Received 22 October 2007 Accepted 20 August 2008 Recommended by Rocky Chang Distributed network traffic anomaly refers to a traffic abnormal behavior involving many links of a network and caused by the same source . DDoS attack worm propagation . The anomaly transiting in a single link might be unnoticeable and hard to detect while the anomalous aggregation from many links can be prevailing and does more harm to the networks. Aiming at the similar features of distributed traffic anomaly on many links this paper proposes a network-wide detection method by performing anomalous correlation analysis of traffic signals instantaneous parameters. In our method traffic signals instantaneous parameters are firstly computed and their network-wide anomalous space is then extracted via traffic prediction. Finally an anomaly is detected by a global correlation coefficient of anomalous space. Our evaluation using Abilene traffic traces demonstrates the excellent performance of this approach for distributed traffic anomaly detection. Copyright 2009 Li Zonglin et al. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use distribution and reproduction in any medium provided the original work is properly cited. 1. Introduction Network traffic anomaly is referred to as a situation such that traffic deviates from its normal behavior while distributed network traffic anomaly is a traffic abnormal .
