Presentation 2005-04-21
Anomaly detection by change of states on network traffic statistics
Nobuyuki NAKAMURA, Toshihisa NAKAI,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) The serious situation, in which the network service will not be provided to the users, may occur when the network is filled with the massive traffic produced by network worms. The earlier the network worm be detected, the more effectively the network service provider can take an action. Because the new types of worms are produced in a stream, the detection of an unknown worm is important as well as taht of the known worms. This paper proposes an anomaly detection scheme of the network. The scheme defines the normal state by traffic monitoring of the network and expresses the degree of anomaly of the current state in a numeric form as how far the current state is deviated from the normal state. The simulation shows that the degree of anomaly corresponds to the amount of the abnormal traffic such as port scans.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Network Security / Worm / DDoS / anomaly / traffic
Paper # NS2005-5
Date of Issue

Conference Information
Committee NS
Conference Date 2005/4/14(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Network Systems(NS)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Anomaly detection by change of states on network traffic statistics
Sub Title (in English)
Keyword(1) Network Security
Keyword(2) Worm
Keyword(3) DDoS
Keyword(4) anomaly
Keyword(5) traffic
1st Author's Name Nobuyuki NAKAMURA
1st Author's Affiliation Ubiquitous System Laboratory, Corporate Research & Development Center, Oki Electric Industry Co., Ltd.()
2nd Author's Name Toshihisa NAKAI
2nd Author's Affiliation Ubiquitous System Laboratory, Corporate Research & Development Center, Oki Electric Industry Co., Ltd.
Date 2005-04-21
Paper # NS2005-5
Volume (vol) vol.105
Number (no) 12
Page pp.pp.-
#Pages 4
Date of Issue