Skip to main content

2018 | OriginalPaper | Buchkapitel

Dynamic Group Behavior Analysis and Its Application in Network Abnormal Behavior Detection

verfasst von : Yan Tong, Jian Zhang, Wei Chen, Mingdi Xu, Tao Qin

Erschienen in: Communications and Networking

Verlag: Springer International Publishing

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

Focus on the difficulty of large-scale network traffic monitoring and analysis, this paper proposed the concepts of Group Behavior Flow model to aggregate traffic packets and perform abnormal behavior detection. Based on the flow model the pivotal traffic metrics can be extracted while the number of flow records are reduced significantly. Secondly, we employ the graph model to capture the traffic feature distribution between different group users. And optical flow analysis methods are proposed to extract the dynamic behavior changing features between different groups and achieve the goal of abnormal behavior detection. The experimental results based on actual traffic traces show that the methods proposed in this paper can capture the traffic features effectually in the current 10 Gbps network environment, and achieve the goal of abnormal behavior detection and abnormal source location, which is very important for traffic management.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literatur
1.
Zurück zum Zitat Baldi, M., Baralis, E., Risso, F.: Data mining techniques for effective and scalable traffic analysis. In: IEEE International Symposium on Integrated Network Management, 15–19 May 2005, pp. 105–118 (2005) Baldi, M., Baralis, E., Risso, F.: Data mining techniques for effective and scalable traffic analysis. In: IEEE International Symposium on Integrated Network Management, 15–19 May 2005, pp. 105–118 (2005)
2.
Zurück zum Zitat Zhou, A., Guang, C., Guo, X.: High-speed network traffic measurement methods. J. Softw. 25(1), 135–153 (2014) Zhou, A., Guang, C., Guo, X.: High-speed network traffic measurement methods. J. Softw. 25(1), 135–153 (2014)
3.
Zurück zum Zitat Zhang, B., Yang, J., Wu, J.: Survey and analysis on the internet traffic model. J. Softw. 22(01), 115–131 (2011)CrossRef Zhang, B., Yang, J., Wu, J.: Survey and analysis on the internet traffic model. J. Softw. 22(01), 115–131 (2011)CrossRef
4.
Zurück zum Zitat Wang, J., Rossell, D., Cassandras, C.G., et al.: Network anomaly detection: a survey and comparative analysis of stochastic and deterministic methods. In: Proceedings of the 52nd IEEE Conference on Decision and Control, Florence, Italy (2013) Wang, J., Rossell, D., Cassandras, C.G., et al.: Network anomaly detection: a survey and comparative analysis of stochastic and deterministic methods. In: Proceedings of the 52nd IEEE Conference on Decision and Control, Florence, Italy (2013)
6.
Zurück zum Zitat Kim, S.S., Reddy, A.L.N.: A study of analyzing network traffic as images in real-time. In: 24th Annual Joint Conference of the IEEE Computer and Communications Societies, 13–17 March 2005, vol. 3, pp. 2056–2067 (2005) Kim, S.S., Reddy, A.L.N.: A study of analyzing network traffic as images in real-time. In: 24th Annual Joint Conference of the IEEE Computer and Communications Societies, 13–17 March 2005, vol. 3, pp. 2056–2067 (2005)
7.
Zurück zum Zitat Lakhina, A., Papagiannaki, K., Crovella, M., et al.: Structural analysis of network traffic flows. In: Proceedings of the Joint International Conference on Measurement and Modeling Of Computer Systems, pp. 61–72 (2004) Lakhina, A., Papagiannaki, K., Crovella, M., et al.: Structural analysis of network traffic flows. In: Proceedings of the Joint International Conference on Measurement and Modeling Of Computer Systems, pp. 61–72 (2004)
8.
Zurück zum Zitat Freedman, M.J., Vutukuru, M., Feamster, N., et al.: Geographic locality of IP prefixes. In: Proceedings of the ACM Internet Measurement Conference Berkeley, CA, pp. 153–158, October 2005 Freedman, M.J., Vutukuru, M., Feamster, N., et al.: Geographic locality of IP prefixes. In: Proceedings of the ACM Internet Measurement Conference Berkeley, CA, pp. 153–158, October 2005
9.
Zurück zum Zitat Wang, X., Zhang, G.: Research on moving object detection method based on optical flow. J. Comput. Eng. Appl. 40(1), 43–46 (2004) Wang, X., Zhang, G.: Research on moving object detection method based on optical flow. J. Comput. Eng. Appl. 40(1), 43–46 (2004)
Metadaten
Titel
Dynamic Group Behavior Analysis and Its Application in Network Abnormal Behavior Detection
verfasst von
Yan Tong
Jian Zhang
Wei Chen
Mingdi Xu
Tao Qin
Copyright-Jahr
2018
Verlag
Springer International Publishing
DOI
https://doi.org/10.1007/978-3-319-78139-6_30