Network anomaly detection using nonextensive entropy
Artur Ziviani, Antônio Tadeu A. Gomes, Marcelo Monsores, Paulo Sergio Rodrigues · IEEE Communications Letters · 2007
Detection is a crucial step towards efficiently diagnosing network traffic anomalies within an autonomous system (AS). We propose the adoption of nonextensive entropy - a one-parameter generalization of Shannon entropy - to detect anomalies in network traffic within an AS. Experimental results show that our approach based on nonextensive entropy outperforms previous ones based on classical entropy while providing enhanced flexibility, which is enabled by the possibility of fine-tuning the sensitivity of the detection mechanism.