Presentation 2010-10-29
Effect of temporal monitoring granularity on detection accuracy of anomalous traffic(Network Analysis and Wireless System,Future Internet, etc)
Keisuke ISHIBASHI, Ryoichi KAWAHARA, Tatsuya MORI, Tsuyoshi KONDOH, Shoichiro ASANO,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) In this paper, we quantitatively evaluate how temporal granularity in traffic monitoring (monitoring interval) affects the detectability of anomalous traffic. We build equations to calculate False Negative Ratio (FNR) with given sampling rate, statistics of normal traffic and volume of anomaly to be detected. With those equations, we can provide answers to the questions that arise in actual network operators, and had not been answered yet, such as which monitoring granularity is appropriate to find the given volume of anomaly. We also evaluate how the equations well estimate the FNR by using the actual traffic data.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) DDoS / temporal granularity / long-range dependence
Paper # IA2010-49
Date of Issue

Conference Information
Committee IA
Conference Date 2010/10/21(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Internet Architecture(IA)
Language ENG
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Effect of temporal monitoring granularity on detection accuracy of anomalous traffic(Network Analysis and Wireless System,Future Internet, etc)
Sub Title (in English)
Keyword(1) DDoS
Keyword(2) temporal granularity
Keyword(3) long-range dependence
1st Author's Name Keisuke ISHIBASHI
1st Author's Affiliation NTT Information Sharing Platform Laboratories, NTT Corporation:NTT Service Integration Laboratories, NTT Corporation()
2nd Author's Name Ryoichi KAWAHARA
2nd Author's Affiliation NTT Information Sharing Platform Laboratories, NTT Corporation:NTT Service Integration Laboratories, NTT Corporation
3rd Author's Name Tatsuya MORI
3rd Author's Affiliation NTT Information Sharing Platform Laboratories, NTT Corporation:NTT Service Integration Laboratories, NTT Corporation
4th Author's Name Tsuyoshi KONDOH
4th Author's Affiliation NTT Information Sharing Platform Laboratories, NTT Corporation:NTT Service Integration Laboratories, NTT Corporation
5th Author's Name Shoichiro ASANO
5th Author's Affiliation National Institute of Informatics
Date 2010-10-29
Paper # IA2010-49
Volume (vol) vol.110
Number (no) 260
Page pp.pp.-
#Pages 6
Date of Issue