A Novel Covariance Matrix Based Approach for Detecting Network Anomalies

During the last decade, anomaly detection has attracted the attention of many researchers to overcome the weakness of signature-based IDSs in detecting novel attacks. However, having a relatively high false alarm rate, anomaly detection has not been wildly used in real networks. In this paper, we have proposed a novel anomaly detection scheme using the correlation information contained in groups of network traffic samples. Our experimental results show promising detection rates while maintaining false positives at very low rates.

• Type: Conference
• Year: 2008
• Where: CNSR
• Authors: Mahbod Tavallaee, Wei Lu, Shah Arif Iqbal, Ali A. Ghorbani
• Keywords: Anomaly Detection, CNSR 2008, Communications, False Alarm Rate, Promising Detection Rates