Abstract:Cloud computing represents a new paradigm where computing resources are offered as services in the world via communication Internet. As many new types of attacks are arising at a high frequency, the cloud computing services are exposed to an increasing amount of security threats. To reduce security risks, two approaches of the network traffic anomaly detection in cloud communications have been presented, which analyze dynamic characteristics of the network traffic based on the synergetic neural networks and the catastrophe theory. In the former approach, a synergetic dynamic equation with a group of the order parameters is used to describe the complex behaviors of the network traffic system in cloud communications. When this equation is evolved, only the order parameter determined by the primary factors can converge to 1. Then, the anomaly can be detected. In the latter approach, a catastrophe potential function is introduced to describe the catastrophe dynamic process of the network traffic in cloud communications. When anomalies occur, the state of the network traffic will deviate from the normal one. To assess the deviation, an index named as catastrophe distance is defined. The network traffic anomaly can be detected by the value of this index. We evaluate the performance of these two approaches using the standard Defense Advanced Research Projects Agency data sets. Experimental results show that our approaches can effectively detect the network traffic anomaly and achieve the high detection probability and the low false alarms rate.

Research on the detection of abnormal traffic for multi-channel network

An Abnormal Network Traffic Detection Algorithm Based on Big Data Analysis

Multi-layer Anomaly Detection for Internet Traffic Based on Data Mining

Traffic Anomaly Detection in Backbone Networks Using Classification of Multidimensional Time Series of Entropy

Anomalous Trafifc Detection Based on Trafifc Behavior Characteristics

A Transform Domain-Based Anomaly Detection Approach To Network-Wide Traffic

Detection Network Anomalies Based on Packet and Flow Analysis

Traffic features extraction and clustering analysis for abnormal behavior detection.

A Real-Time Detection Approach to Network Traffic Anomalies in Communication Networks

Network Anomaly Detection Based on Traffic Clustering with Group-Entropy Similarity

MSCA: an Unsupervised Anomaly Detection System for Network Security in Backbone Network.

Multi‐scale Anomaly Detection for High‐speed Network Traffic

Anomaly Detection Based on Traffic Information Structure

Anomaly Secure Detection Methods by Analyzing Dynamic Characteristics of the Network Traffic in Cloud Communications

Network Anomaly Detection Based on Statistical Approach and Time Series Analysis

Traffic Anomaly Detection Using Multi-Flows and Multi-Parameters in Backbone Network

Behavior Pattern Mining from Traffic and Its Application to Network Anomaly Detection

A Time-Frequency Detecting Method for Network Traffic Anomalies

Analysis Method of Multi-Source Flow Characteristics and Its Application in Anomaly Detection

Network Anomaly Detection Based on Traffic Prediction

A multi-channel anomaly detection method with feature selection and multi-scale analysis