Parametric Methods for Anomaly Detection in Aggregate Traffic

@article{Thatte2011ParametricMF,
  title={Parametric Methods for Anomaly Detection in Aggregate Traffic},
  author={Gautam Thatte and Urbashi Mitra and John S. Heidemann},
  journal={IEEE/ACM Transactions on Networking},
  year={2011},
  volume={19},
  pages={512-525}
}
This paper develops parametric methods to detect network anomalies using only aggregate traffic statistics, in contrast to other works requiring flow separation, even when the anomaly is a small fraction of the total traffic. By adopting simple statistical models for anomalous and background traffic in the time domain, one can estimate model parameters in real time, thus obviating the need for a long training phase or manual parameter tuning. The proposed bivariate parametric detection… CONTINUE READING
Highly Cited
This paper has 102 citations. REVIEW CITATIONS