Detection of Leaps/sLumps in Traffic Volume of Internet Backbone

Authors:
Yutaka Hirokawa;Kimihiro Yamamoto;Shigeaki Harada;Ryoichi Kawahara
Affiliations:
NTT Information Sharing Platform Laboratories, Tokyo, Japan 180-8585;NTT Information Sharing Platform Laboratories, Tokyo, Japan 180-8585;NTT Service Integration Laboratories, Tokyo, Japan 180-8585;NTT Service Integration Laboratories, Tokyo, Japan 180-8585
Venue:
APNOMS '08 Proceedings of the 11th Asia-Pacific Symposium on Network Operations and Management: Challenges for Next Generation Network Operations and Service Management
Year:
2008

Citing 3
Cited 0

A signal analysis of network traffic anomalies

Proceedings of the 2nd ACM SIGCOMM Workshop on Internet measurment
Aberrant Behavior Detection in Time Series for Network Monitoring

LISA '00 Proceedings of the 14th USENIX conference on System administration
A Study on Detecting Network Anomalies Using Sampled Flow Statistics

SAINT-W '07 Proceedings of the 2007 International Symposium on Applications and the Internet Workshops

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper focuses on detecting anomalies in Internet backbone traffic. To monitor traffic on a scale of several terabits per second, we need to divide the time series data of a traffic volume into many slices. Therefore, we need to monitor a lot of traffic data. However, adjusting an appropriate threshold for each traffic time series data individually is difficult. To solve this problem, we propose an anomaly-detection algorithm that does not need parameters to be set for each time series data. This algorithm operates acc-urately with low computational complexity. A side-by-side test demonstrated that the accuracy of the algorithm was higher than that of the conventional method. Moreover, the necessary learning period of the algorithm was shorter than that of the conventional method.