On the use of co-occurrence matrices for network anomaly detection

  • Authors:
  • Christian Callegari;Stefano Giordano;Michele Pagano

  • Affiliations:
  • University of Pisa, Italy;University of Pisa, Italy;University of Pisa, Italy

  • Venue:
  • Proceedings of the 2009 International Conference on Wireless Communications and Mobile Computing: Connecting the World Wirelessly
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

In the last few years the number and impact of security attacks over the Internet have been continuously increasing. Since it is impossible to guarantee complete protection to a system by means of the "classical" prevention mechanisms, the use of Intrusion Detection Systems (IDSs) has emerged as a key element in network security. In this paper we address the problem considering some techniques for detecting network anomalies, based on the use of co-occurrence matrices, to model the "normal" behavior of the TCP connections. The performance analysis, shows a comparison among the different solutions, which demonstrates the effectiveness of the proposed methods.