Hardware Precomputation of Entropy for Anomaly Detection

Authors:
Václav Bartoš;Martin Žádník
Affiliations:
-;-
Venue:
Proceedings of the 2011 ACM/IEEE Seventh Symposium on Architectures for Networking and Communications Systems
Year:
2011

Citing 5
Cited 0

Profiling internet backbone traffic: behavior models and applications

Proceedings of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications
Mining anomalies using traffic feature distributions

Proceedings of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications
Is sampled data sufficient for anomaly detection?

Proceedings of the 6th ACM SIGCOMM conference on Internet measurement
Counter braids: a novel counter architecture for per-flow measurement

SIGMETRICS '08 Proceedings of the 2008 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
Effective discovery of attacks using entropy of packet dynamics

IEEE Network: The Magazine of Global Internetworking

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper deals with hardware acceleration of entropy computation. Various entropies are computed from network features and their mutual combinations. The precomputation allows to offload entropy computation to metering points where it can be computed using unsampled data.