Abnormity Detection of Network Traffic Applied Self-Similarity Analysis of Network Traffics
Shiqi Jiang · Ordnance Industry Automation · 2003
Self-similarity analysis of network traffic (SSANT) includes aggregated variance, R/S analysis, periodic diagram and whittle methods. The normal model of network traffic was adopted in abnormity detection of network traffic based on SSANT. Self-Similarity Hurst parameter and time variable function H(t) of network traffics was analyzed. Network traffic was limited in real time and the abnormity characteristic was refined with database statistical analysis. Through detection of self-similarity change was measured, then determine whether the current traffic is normal. Attack test of distributed decline service shows that abnormity detection of network traffic based on SSANT is more reliable on the recognition of network traffic abnormity than any other traditional method based on character recognition.