IEEE INFOCOM 2007 - 26th IEEE International Conference on Computer Communications 2007
DOI: 10.1109/infcom.2007.79
|View full text |Cite
|
Sign up to set email alerts
|

Multivariate Online Anomaly Detection Using Kernel Recursive Least Squares

Abstract: Abstract-High-speed backbones are regularly affected by various kinds of network anomalies, ranging from malicious attacks to harmless large data transfers. Different types of anomalies affect the network in different ways, and it is difficult to know a priori how a potential anomaly will exhibit itself in traffic statistics. In this paper we describe an online, sequential, anomaly detection algorithm, that is suitable for use with multivariate data. The proposed algorithm is based on the kernel version of the… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1
1

Citation Types

1
68
0

Year Published

2010
2010
2022
2022

Publication Types

Select...
5
4
1

Relationship

1
9

Authors

Journals

citations
Cited by 115 publications
(69 citation statements)
references
References 12 publications
1
68
0
Order By: Relevance
“…They extended this work in [17] where KOAD, an incremental learning approach for real-time diagnosis of volume anomalies. KOAD exploits temporal variations in the structure of multivariate network traffic.…”
Section: A Network Monitoringmentioning
confidence: 99%
“…They extended this work in [17] where KOAD, an incremental learning approach for real-time diagnosis of volume anomalies. KOAD exploits temporal variations in the structure of multivariate network traffic.…”
Section: A Network Monitoringmentioning
confidence: 99%
“…If the points {x t } T t=1 show normal behaviour in the input space, then the corresponding feature vectors {φ(x t )} T t=1 are expected to (also) cluster [3]. Then, it should be possible to explain the region of normality in the feature space using a relatively small dictionary of approximately linearly independent elements {φ(x j )} m j=1 .…”
Section: Kernel-based Online Anomaly Detection Algorithmmentioning
confidence: 99%
“…Machine learning methods are usually employed to model what constitutes a nominal behavior and deriving from the representation of the nominal behavior the abnormal behavior. For example, Ahmed et al ([3], [2]) investigate the use of two distinct machine learning approaches, namely the block-based One-Class Neighbor Machine and the recursive Kernel-based Online Anomaly Detection algorithms, to detect network anomaly. Yet, as often happens in machine learning techniques, their models are constrained and cannot be easily adapted to other domains.…”
Section: Related Workmentioning
confidence: 99%