Abstract:Detecting anomalies, such as network failure or intentional attack in Internet, is a vital but challenging task. Although numerous techniques have been developed based on Internet traffic, detecting anomalies from the perspective of Internet topology structure is going to be possible because the anomaly detection of structured datasets based on complex network theory has become a focus of attention recently. In this paper, an anomaly detection method for the large-scale Internet topology is proposed to detect local structure crashes caused by the cascading failure. In order to quantify the dynamic changes of Internet topology, the network path changes coefficient (NPCC) is put forward which highlights the Internet abnormal state after it is attacked continuously. Furthermore, inspired by Fibonacci Sequence, we proposed the decision function that can determine whether the Internet is abnormal or not. That is the current Internet is abnormal if its NPCC is out of the normal domain calculated using the previous k NPCCs of Internet topology. Finally the new Internet anomaly detection method is tested against the topology data of three Internet anomaly events. The results show that the detection accuracy of all events are over 97%, the detection precision for three events are 90.24%, 83.33% and 66.67%, when k=36. According to the experimental values of index F1, larger values of k offer better detection performance. Meanwhile, our method has better performance for the anomaly behaviors caused by network failure than those caused by intentional attack. Compared with traditional anomaly detection methods, our work is more simple and powerful for the government or organization in items of detecting large-scale abnormal events.

IP Network Anomalous Behaviors Detection Mechanism Based on Cusp-Catastrophe Model

Packet Payload Based Anomalous Network Intrusion Detection

Network traffic anomaly detection based on catastrophe theory

An Anomaly-Based Detection in Ubiquitous Network Using the Equilibrium State of the Catastrophe Theory

Network Anomaly Detection Based on TCM-KNN Algorithm

Behavior Pattern Mining from Traffic and Its Application to Network Anomaly Detection

Internet Anomaly Detection Based on Complex Network Path

Network Anomaly Detection Based on Statistical Approach and Time Series Analysis

An Effective Method for Computer Network Anomaly Detection

Anomaly Secure Detection Methods by Analyzing Dynamic Characteristics of the Network Traffic in Cloud Communications

Traffic Model Analysis for Anomaly Detection

An Approach to Model Normal Network Behaviors Based on Entire Network Packets.

Network Anomaly Detection Model Based on Improved Na(i)ve Bayesian Classifier

An Anomaly Detection Model Based on Cloud Model and Danger Theory.

A time-relevant network traffic anomaly detection approach

Statistics based network traffic model and anomaly traffic detection

Research on the detection of abnormal traffic for multi-channel network

A Real-Time Anomaly Detection Model Based on Sampling Measurement in a High-Speed Network

Anomaly detection by discovering bipartite structure on complex networks

Anomaly Detection Based on Traffic Information Structure

Anomalous Trafifc Detection Based on Trafifc Behavior Characteristics