The network anomaly detection is the concept of analyzing network traffic in the search of any sign of "abnormal behavior" because such anomalies are often symptoms of network faults or security breaches. The main aim of this paper is to investigate the dynamics of Address Resolution Protocol (ARP) traffic time series using Fourier and nonlinear methods. The experimental network consists of workstations connected through several network switches and one router with Internet connection. Two cases of workstation traffic are analyzed: minimal and continuous. It is shown that the ARP traffic has long time period of 23.5 hours and short time periods in two intervals (2-6) and (9-12) minutes. These periods are proved to be independent of the workstation traffic intensity. The time series of the ARP frames whereas has deterministic chaos character. The largest Lyapunov exponent indicates that the time of stability loss of ARP time series is equal to 15 minutes. © 2008 IEEE.
Frequency And Fractal Analysis Of Address Resolution Protocol Traffic
摘要:
DOI:
10.1109/CISIM.2008.56
关键词:
Acoustic radiators; Differential equations; Financial data processing; Industrial engineering; Industrial management; Information management; Information science; Information systems; Internet; Lyapunov methods; Network protocols; Project management; Routers; Time series analysis; Network traffic; Nonlinear analysis; Time-series; Computer networks;
年份:
2008
相关文献
- Frequency And Fractal Analysis Of Address Resolution Protocol Traffic期刊名：Frequency And Fractal Analysis Of Address Resolution Protocol TrafficDOI: 10.1109/CISIM.2008.56
- Evolution Induced Secondary Immunity: An Artificial Immune System Based Intrusion Detection System期刊名：Evolution Induced Secondary Immunity: An Artificial Immune System Based Intrusion Detection SystemDOI: 10.1109/CISIM.2008.31
- Wireless Sensor Network Protocols For Secure And Energy-efficient Data Transmission期刊名：Wireless Sensor Network Protocols For Secure And Energy-efficient Data TransmissionDOI: 10.1109/CISIM.2008.24
- Finding Candidate Helpers In Collaborative E-Learning Using Rough Sets期刊名：Finding Candidate Helpers In Collaborative E-Learning Using Rough SetsDOI: 10.1109/CISIM.2008.61
- Data Mining Techniques In E-learning CelGrid System期刊名：Data Mining Techniques In E-learning CelGrid SystemDOI: 10.1109/CISIM.2008.35
- Learning Assistant - Personalizing Learning Paths In E-learning Environments期刊名：Learning Assistant - Personalizing Learning Paths In E-learning EnvironmentsDOI: 10.1109/CISIM.2008.51
- Survey: Using Genetic Algorithm Approach In Intrusion Detection Systems Techniques期刊名：Survey: Using Genetic Algorithm Approach In Intrusion Detection Systems TechniquesDOI: 10.1109/CISIM.2008.49
- Should Normal Distribution Be Normal? The Student's T Alternative期刊名：Should Normal Distribution Be Normal? The Student's T AlternativeDOI: 10.1109/CISIM.2007.59
