A comparative study of two network-based anomaly detection methods

—Modern networks are complex and hence, network operators often rely on automation to assist in assuring the security, availability, and performance of these networks. At the core of many of these systems are general-purpose anomalydetection algorithms that seek to identify normal behavior and detect deviations. While the number and variations of these algorithms are large, two broad categories have emerged as leading approaches to this problem: those based on spatial correlation and those based on temporal analysis. In this paper, we compare one promising approach from each of these categories, namely entropy-based PCA and HHH-based wavelets.

• Type: Journal
• Year: 2011
• Where: INFOCOM
• Authors: Kaustubh Nyalkalkar, Sushant Sinha, Michael Bailey, Farnam Jahanian
• Keywords: Communications, INFOCOM 2011, Promising Approach, Spatial Correlation, Temporal Analysis