Science – Future of Lithuania / Mokslas – Lietuvos Ateitis, Vol 6, No 2 (2014)

Network Traffic Anomalies Detecting Using Maximum Entropy Method

Dalius Mažeika (Vilniaus Gedimino technikos universitetas, Lithuania)
Saulius Jasonis (Vilniaus Gedimino technikos universitetas, Lithuania)

Abstract


The problem of traffic anomalies in computer networks is analyzed. NetFlow packets are used as network traffic data and maximum entropy methods is used for anomalies detection. Method detects network anomalies by comparing the current network traffic against a baseline distribution. Method is adopted according to NetFow data and performace of the method is improved. Prototype of anomalies detection system was developed and experimental investigation carried out. Results of investigation confirmed that method is sensitive to deviations of the network traffic and can be successfully used for network traffic anomalies detection.


Article in: English

Article published: 2014-04-24

Keyword(s): anomalies detection, entropy, NetFlow, computer network.

DOI: 10.3846/mla.2014.22

Full Text: PDF pdf

Science – Future of Lithuania / Mokslas – Lietuvos Ateitis ISSN 2029-2341, eISSN 2029-2252
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 License.