Two-Stage Traffic Anomaly Detection Method Based on Entropy and Linear Relation

doi:10.13190/j.jbupt.2017-257

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2018, Vol. 41 ›› Issue (4): 56-62.doi: 10.13190/j.jbupt.2017-257

• Papers • Previous Articles Next Articles

Two-Stage Traffic Anomaly Detection Method Based on Entropy and Linear Relation

QUI Xue-song¹, ZHANG Xun¹, SONG Yan-bin², ZHAO Bing³, XU Si-ya¹

1. State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications, Beijing 100876, China;
2. Beijing Smartchip Microelectronics Technology Company Limited, Beijing 102200, China;
3. China Electric Power Research Institute, Beijing 100192, China

Received:2017-12-25 Online:2018-08-28 Published:2018-10-09

Abstract

Abstract: To improve the accuracy and real-time traffic anomaly detection methods, a two-stage traffic anomaly detection method based on entropy and linear relation was presented. A two-level dynamic threshold was set and used based on entropy and linear relation to detect abnormal traffic in time domain. The type of traffic anomaly can be indentified through the alarm trigger function. Simulations verify that this method is superior to the existing methods in the accuracy and real-time respects.

Key words: traffic anomaly detection, entropy, linear relation, two-level threshold

CLC Number:

TN929.53

QUI Xue-song, ZHANG Xun, SONG Yan-bin, ZHAO Bing, XU Si-ya. Two-Stage Traffic Anomaly Detection Method Based on Entropy and Linear Relation[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2018, 41(4): 56-62.

References

[1] Breier J, Branišová J. A dynamic rule creation based anomaly detection method for identifying security breaches in log records[J]. Wireless Personal Communications, 2015, 94(3):1-15.
[2] Wang Z, Yang J, Zhang S Z, et al. Robust regression for anomaly detection[C]//IEEE International Conference on Communications.[S. l.]:IEEE, 2017:1-6.
[3] Callegari C, Giordano S, Pagano M, et al. Combining wavelet analysis and CUSUM algorithm for network anomaly detection[C]//IEEE International Conference on Communications.[S. l.]:IEEE, 2012:1091-1095.
[4] Nychis G, Sekar V, Andersen D G, et al. An empirical evaluation of entropy-based traffic anomaly detection[C]//Internet Measurement Conference.[S. l.]:ACM, 2008:151-156.
[5] Callegari C, Giordano S, Pagano M, et al. Entropy-based network anomaly detection[C]//International Conference on Computing, Networkingand Communications.[S. l.]:IEEE, 2017:334-340.
[6] Navaz A S S, Sangeetha V, Prabhadevi C, et al. Entropy based anomaly detection system to prevent DDoS attacks in cloud[J]. International Journal of Computer Applications, 2013, 62(15):42-47.
[7] Huo X, Lü C, Pei P, et al. Smart grid communication network traffic anomaly detection based on entropy analysis[C]//IEEE International Conference on Computer and Communications.[S. l.]:IEEE, 2017:1082-1086.
[8] Salem O, Naït-abdesselam F, Mehaoua A, et al. Anomaly detection in network traffic using Jensen-Shannon divergence[C]//IEEE International Conference on Communications.[S. l.]:IEEE, 2012:5200-5204.
[9] 范晓诗, 李成海. 加权条件熵在异常检测中的应用[J]. 计算机应用研究, 2014, 31(1):203-205. Fan Xiaoshi, Li Chenghai. Application of weighted conditional entropy in anomaly detection[J]. Application Research of Computers, 2014, 31(1):203-205.
[10] 李中魁. 基于动态阈值的网络流量异常检测方法研究与实现[D]. 成都:电子科技大学, 2010.
[11] Iordache M, Jouet S, Marnerides A K, et al. Distributed, multi-level network anomaly detection for datacentre networks[C]//2017 IEEE International Conference on Communications.[S. l.]:IEEE, 2017:1-6.

[1]	YANG Hongyu, YUAN Haihang, ZHANG Liang. A Risk Assessment Method of Network Host Node with Host Importance [J]. Journal of Beijing University of Posts and Telecommunications, 2022, 45(2): 16-21.
[2]	ZHANG Ping, XU Xiao-dong, HAN Shu-jun, NIU Kai, XU Wen-jun, LAN Yue-heng. Entropy Reduced Mobile Networks Empowering Industrial Applications [J]. Journal of Beijing University of Posts and Telecommunications, 2020, 43(6): 1-9.
[3]	SUN Yi, XIA Qi-zhao. Analysis and Improvement of Semi-Supervised K-means Clustering Based on Particle Swarm Optimization Algorithm [J]. Journal of Beijing University of Posts and Telecommunications, 2020, 43(5): 21-26.
[4]	WU Xin-zhong, XIA Ling-xiang, ZHANG Xu, ZHOU Cheng. Voice Activity Detection Method Based on MFPH [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2019, 42(2): 83-89.
[5]	LI Wen-jing, LI Meng, XING Ning-zhe, JI Yu-tong, ZENG Xiang-jian. Risk Prediction of Power Data Network Based on Entropy Weight-Gray Model [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2018, 41(3): 39-45.
[6]	CHAO Hao, LU Bao-yun, LIU Yong-li, LIU Zhi-zhong, SONG Cheng. Vocal Effort Detection Based on Spectral Information Entropy and Complementary Models [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2018, 41(2): 56-61.
[7]	ZHAO Jian, ZHANG Wan-ru, ZHANG Shun-li, LEI Min, XU Wen-sheng, FAN Shuai-shuai. A Novel Hybrid Digital Watermarking Scheme Using SVD in Non-Subsampled Shearlet [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 34-38.
[8]	YING Fei-hao, XING Ning-zhe, JI Yu-tong, JI Chen-chen, LI Wen-jing. KTLAD Based Traffic Anomaly Detection Algorithm of Electric Power Data Network [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 108-111.
[9]	WANG Yao, LIU Shi-dong, GUO Jing-hong. Fault Diagnosis Technology Based on Minimum Entropy [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(s1): 10-13.
[10]	CHEN Yong-qiang, WU Xiao-ping, FU Yu, SONG Yan. Network Security Evaluation Based on Stochastic Game and Network Entropy [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(s1): 92-96.
[11]	NIU Kun, ZHANG Shu-bo, ZHAO Fang. Subspace Clustering through United Entropy Matrix [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(3): 104-108.
[12]	DAI Fang-fang, ZHENG Kang-feng, HU Ying, LI Zhong-xian. A K-Means Cluster Evaluation of Attack Effect Based on Bi-Dimensional Entropy Components [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2014, 37(1): 71-75.
[13]	. An EntropyBased Estimation of Noise Variance in Wavelet Domain [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2011, 34(5): 1-5.
[14]	LuZhenbang,ZHOU Bo. Hierarchical Risk Assessment Based on Shapley Entropies and Choquet Integrals [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2009, 32(6): 83-87.
[15]	ZHAO Shan,TANG Yongli,\ LIU Jing. JPEG Image Retrieval Based on the Spatial Distribution \=of the DCT Coefficients [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2009, 32(5): 32-35.

Two-Stage Traffic Anomaly Detection Method Based on Entropy and Linear Relation

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments