Network-wide Traffic Anomaly Detection Based on Entropy
Yuexiang Yang · Jisuanji gongcheng · 2007
This paper presents a new method of network-wide traffic anomaly detection. The method is based on entropy, which absorbs the idea of subspace method and combines K-means clustering method. In experiment environment of campus networks, the process of detecting network traffic anomalies is realized by applying the method based on entropy. Through the comparison of the results from the experiment and standard subspace method analysis of measurement data, it shows that network-wide traffic anomaly detection based on entropy has a higher detection precision.