Multi-scale entropy and renyi cross entropy based traffic anomaly detection

@article{Yan2008MultiscaleEA,
  title={Multi-scale entropy and renyi cross entropy based traffic anomaly detection},
  author={Ruoyu Yan and Qinghua Zheng and Weimin Peng},
  journal={2008 11th IEEE Singapore International Conference on Communication Systems},
  year={2008},
  pages={554-558}
}
The idea of using entropy measurement to detect anomalies is not a novelty in the research community. But all these entropy-based approaches are single-scale based ¿complexity¿ methods, and don¿t consider temporal and spatial correlation in network traffic. In this paper, multi-scale entropy (MSE) and Renyi cross entropy are introduced to solve these problems. First, a kind of Port-to-Port traffic termed IF-flow in router is defined. Internal traffic matrix can be constructed by IF-flows. Then… CONTINUE READING