Abstract:Detecting anomalies, such as network failure or intentional attack in Internet, is a vital but challenging task. Although numerous techniques have been developed based on Internet traffic, detecting anomalies from the perspective of Internet topology structure is going to be possible because the anomaly detection of structured datasets based on complex network theory has become a focus of attention recently. In this paper, an anomaly detection method for the large-scale Internet topology is proposed to detect local structure crashes caused by the cascading failure. In order to quantify the dynamic changes of Internet topology, the network path changes coefficient (NPCC) is put forward which highlights the Internet abnormal state after it is attacked continuously. Furthermore, inspired by Fibonacci Sequence, we proposed the decision function that can determine whether the Internet is abnormal or not. That is the current Internet is abnormal if its NPCC is out of the normal domain calculated using the previous k NPCCs of Internet topology. Finally the new Internet anomaly detection method is tested against the topology data of three Internet anomaly events. The results show that the detection accuracy of all events are over 97%, the detection precision for three events are 90.24%, 83.33% and 66.67%, when k=36. According to the experimental values of index F1, larger values of k offer better detection performance. Meanwhile, our method has better performance for the anomaly behaviors caused by network failure than those caused by intentional attack. Compared with traditional anomaly detection methods, our work is more simple and powerful for the government or organization in items of detecting large-scale abnormal events.

A New Anomaly Detection Method Based on IGTE and IGFE.

An On-Line Anomaly Detection Method Based on a New Stationary Metric - Entropy-Ratio

A Transform Domain-Based Anomaly Detection Approach To Network-Wide Traffic

Characterizing Network Anomaly Traffic with Euclidean Distance-Based Multiscale Fuzzy Entropy.

Anomaly detection for network traffic flow

Network Anomaly Detection Algorithm Based on Lindeberg-Feller Central Limit Theorem

An Effective Method for Computer Network Anomaly Detection

Network Anomaly Detection Based on Statistical Approach and Time Series Analysis

A Time-Frequency Detecting Method for Network Traffic Anomalies

An on-line anomaly detection method based on LMS algorithm

Anomaly Detection of Network Traffic Based on Wavelet Packet

Ceff: An Efficient Approach For Traffic Anomaly Detection And Classification

A Wavelet-Based Detection Approach to Traffic Anomalies

Detecting Distributed Network Traffic Anomaly with Network-Wide Correlation Analysis

Web-Based Application for Traffic Anomaly Detection Algorithm

An Continuous Wavelet Transform-Based Detection Approach to Traffic Anomalies

Anomaly Detections in Internet traffic Using Empirical Measures

Internet Anomaly Detection Based on Complex Network Path

Large-Scale Ip Network Flow-Level Abnormal Behavior Trends Analysis Using Combined Anomaly Grey Forecasting Algorithm

Subtle Anomaly Detection in Dynamic Networks Using Graph Spectra

A Detection Algorithm to Anomaly Network Traffic Based on Spectral Kurtosis Analysis