Abnormal traffic detection and its implementation
SooHyung Lee, Hyunju Kim, Jung-Chan Na, Jong-su Jang · 2005
Wide spread of Internet usage has introduced many network security threats, and the recent trend of attack is to cause serious network performance degradation by introducing large amount of malicious traffic into the network. In this paper we discuss traffic analysis method in point of view of network security, present our abnormal traffic detection method which is based on anomaly analysis. We show experimental results of our analysis model, which was made on 8 days real world traffic at the international backbone link, and introduce our implementation prototype