Application of Wavelet Packet Transform to Network Anomaly Detection

  • Authors:
  • Christian Callegari;Stefano Giordano;Michele Pagano

  • Affiliations:
  • Dipartimento di Ingegneria dell'Informazione, Università di Pisa, Pisa, Italy I-56126;Dipartimento di Ingegneria dell'Informazione, Università di Pisa, Pisa, Italy I-56126;Dipartimento di Ingegneria dell'Informazione, Università di Pisa, Pisa, Italy I-56126

  • Venue:
  • NEW2AN '08 / ruSMART '08 Proceedings of the 8th international conference, NEW2AN and 1st Russian Conference on Smart Spaces, ruSMART on Next Generation Teletraffic and Wired/Wireless Advanced Networking
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

In the last few years, the number and impact of security attacks over the Internet have been continuously increasing. Since it seems impossible to guarantee complete protection to a system by means of the "classical" prevention mechanisms, the use of Intrusion Detection Systems (IDSs) has emerged as a key element in network security. In this paper we address the problem considering different methods, based on the Wavelet Packet Transform, for detecting anomalies in the network traffic, taking into account both the best basis and the value of transformed coefficients.The performance comparison among the different solutions shows that very little information about network anomalies is carried by the best basis selection, while the "distance" between the transformed coefficients leads to very interesting results, highlighting the effectiveness of the proposed approaches.