ARIMA Based Network Anomaly Detection

An early warning system on potential attacks from networks will enable network administrators or even automated network management software to take preventive measures. This is needed as we move towards maximizing the utilization of the network with new paradigms such as Web Services and Software As...

Full description

Saved in:
Bibliographic Details
Published in2010 Second International Conference on Communication Software and Networks pp. 205 - 209
Main Authors Yaacob, A.H., Tan, I.K.T., Su Fong Chien, Hon Khi Tan
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.02.2010
Subjects
Alarm systems
ARIMA
Communication system software
Communication system traffic control
Computer crime
Denial of Service
Forecasting
Intrusion detection
Multimedia systems
Network Security
Pattern matching
Physics
Telecommunication traffic
Traffic control
Online AccessGet full text

Cover

More Information
Summary:An early warning system on potential attacks from networks will enable network administrators or even automated network management software to take preventive measures. This is needed as we move towards maximizing the utilization of the network with new paradigms such as Web Services and Software As A Service. This paper introduces a novel approach through using Auto-Regressive Integrated Moving Average (ARIMA) technique to detect potential attacks that may occur in the network. The solution is able to provide feedback through its predictive capabilities and hence provide an early warning system. With the affirmative results, this technique can serve beyond the detection of Denial of Service (DoS) and with sufficient development; an automated defensive solution can be achieved.
ISBN:1424457262
9781424457267
DOI:10.1109/ICCSN.2010.55