A Network Anomaly Detection System Based on Information Measures and Multidimensional Traffic Mining Algorithms
Bei Zhang · 2009
This paper introduces a network anomaly detection system based on information measures and multidimensional traffic mining algorithms. The system employs information measures for identifying network anomalies, and then uses multidimensional traffic mining algorithms for fine-grained analysis in order to obtain meaningful information from anomaly-related-traffic. Experiments demonstrates that the system can efficiently and accurately detect network anomalies.