Abstract:Detecting anomalies, such as network failure or intentional attack in Internet, is a vital but challenging task. Although numerous techniques have been developed based on Internet traffic, detecting anomalies from the perspective of Internet topology structure is going to be possible because the anomaly detection of structured datasets based on complex network theory has become a focus of attention recently. In this paper, an anomaly detection method for the large-scale Internet topology is proposed to detect local structure crashes caused by the cascading failure. In order to quantify the dynamic changes of Internet topology, the network path changes coefficient (NPCC) is put forward which highlights the Internet abnormal state after it is attacked continuously. Furthermore, inspired by Fibonacci Sequence, we proposed the decision function that can determine whether the Internet is abnormal or not. That is the current Internet is abnormal if its NPCC is out of the normal domain calculated using the previous k NPCCs of Internet topology. Finally the new Internet anomaly detection method is tested against the topology data of three Internet anomaly events. The results show that the detection accuracy of all events are over 97%, the detection precision for three events are 90.24%, 83.33% and 66.67%, when k=36. According to the experimental values of index F1, larger values of k offer better detection performance. Meanwhile, our method has better performance for the anomaly behaviors caused by network failure than those caused by intentional attack. Compared with traditional anomaly detection methods, our work is more simple and powerful for the government or organization in items of detecting large-scale abnormal events.

Analysis of IP-Level Topology Data Detected from Single Vantage Point

ALGORITHM AND REALIZATION OF NETWORK TOPOLOGY DISCOVERY

Algorithms Analysis of Topology Discovery for Multi-Layer Networks

Network Topology Discovery Based on Ip Address Inferring

New Algorithms on IP Network Topology Discovery and Its Implement

A New Fault Detection Method for Computer Networks

Research on the Invulnerability of Regional Network Based on Topology Analysis

Modeling Analysis of Network Topology Based on Distribution Network Automation

Detector: A Topology-Aware Monitoring System For Data Center Networks

Network Topology Tomography under Multipath Routing

TopoScope

A Data-Driven Topology and Parameter Joint Estimation Method in non-PMU Distribution Networks

Simultaneous Topology and Loss Tomography Via a Modified Theme Dictionary Model

Research on Real-time Automatic Acquisition Technology of Topology Data in Distribution Network

Uncovering the Dependence of Cascading Failures on Network Topology by Constructing Null Models.

Deterministic Local Multi-Point Fault Detection Method for Industrial Control Topology

A Framework to Quantify the Pitfalls of Using Traceroute in AS-Level Topology Measurement.

Internet Anomaly Detection Based on Complex Network Path

Monitoring Routing Topology in Dynamic Wireless Sensor Network Systems

Taking A Free Ride for Routing Topology Inference in Peer-to-Peer Networks

A new connection degree calculation and measurement method for large scale network monitoring.