Research of Network Traffic Anomaly Detection Technique Based on Histogram Clustering
Chenghua Yan · Xinxi wangluo anquan · 2012
Feature-based anomaly detection technique describes the network anomaly by the distribution of traffic feature.To improve the accuracy and reduce false-positive,this paper proposed method based on clustering of traffic feature histograms technique.Histogram is used to describe the detailed information of spatio-temporal traffic feature,and then establish normal model according to cluster technique,at last based on the vector which composed of distance between traffic feature and normal model.Experiment on DARPA 99 data-set shows,this kind of method get high detection and classification accuracy.