Abstract:The prosperity of mobile networks and social networks brings revolutionary conveniences to our daily lives. However, due to the complexity and fragility of the network environment, network attacks are becoming more and more serious. Characterization of network traffic is commonly used to model and detect network anomalies and finally to raise the cybersecurity awareness capability of network administrators. As a tool to characterize system running status, entropy-based time-series complexity measurement methods such as Multiscale Entropy (MSE), Composite Multiscale Entropy (CMSE), and Fuzzy Approximate Entropy (FuzzyEn) have been widely used in anomaly detection. However, the existing methods calculate the distance between vectors solely using the two most different elements of the two vectors. Furthermore, the similarity of vectors is calculated using the Heaviside function, which has a problem of bouncing between 0 and 1. The Euclidean Distance-Based Multiscale Fuzzy Entropy (EDM-Fuzzy) algorithm was proposed to avoid the two disadvantages and to measure entropy values of system signals more precisely, accurately, and stably. In this paper, the EDM-Fuzzy is applied to analyze the characteristics of abnormal network traffic such as botnet network traffic and Distributed Denial of Service (DDoS) attack traffic. The experimental analysis shows that the EDM-Fuzzy entropy technology is able to characterize the differences between normal traffic and abnormal traffic. The EDM-Fuzzy entropy characteristics of ARP traffic discovered in this paper can be used to detect various types of network traffic anomalies including botnet and DDoS attacks.

Performance Evaluation of Algorithms for Network Traffic Long-range Dependence

Prediction of Self-Similar Traffic and Its Application in Network Bandwidth Allocation

Self-similar traffic prediction based on Lyapunov exponent

Modeling and Simulation of Self-Similar Traffic Based on FBM Model

Research on the Comparison of Time Series Models for Network Traffic Prediction

Improving Autocorrelation Regression for the Hurst Parameter Estimation of Long-Range Dependent Time Series Based on Golden Section Search

On the Time Series Length for an Accurate Fractal Analysis in Network Systems

Self-Similar Traffic:Hurst Parameter Estimation Based on Multiresolution Sampling and Wavelet Analysis

Time Series Analysis of Computer Network Traffic in a Dedicated Link Aggregation

Measurement Analysis of Traffic Flow Uncertainty on Chinese Highway Network

Typical Algorithms for Estimating Hurst Exponent of Time Sequence: A Data Analyst's Perspective

Equation of state for partially ionized carbon at high temperatures

Multifractal Traffic Modeling and Its Parameter Estimation

Characterizing Network Anomaly Traffic with Euclidean Distance-Based Multiscale Fuzzy Entropy.

A Combined Algorithm for Real-time On-line Rapid Identification of the Chaos in Traffic Flow

Time Series Analysis for the Measured Data of Traffic Flow

Multi-Scale Analysis of TCP Traffic

Empirical Analysis of Traffic Bottleneck at Beijing Expressways

Complexity Measure of Traffic Flow Based on Approximate Entropy and Statistical Complexity

A Mixed-Fractal Model for Network Traffic

On the LRD of the Aggregated Traffic Flows in High-Speed Computer Networks