An AR-based Method for Detecting Network Anomaly
Zhongcheng Li · Microelectronics & Computer · 2002
In general,the traffic anomaly is detected using a threshold in network traffic management.In this paper,a new method was presented to dete ct traffic anomaly.By choosing the relevant variables of the SNMP management information base,modeling their observations with AR(Autoregressive)model, de-tecting and analyzing the traffic anomaly caused by a server fault,and one feature vector model of the fault was composed.This kind of method can detect some detailed anomalies those cannot be detected by threshold,and the compariso n between it and GLR test was given.