loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Third International Conference on Information Technology and Applications (ICITA'05) Volume 2
Real-Time Representation of Network Traffic Behavior for Enhanced Security
Sydney, Australia
July 04-July 07
ISBN: 0-7695-2316-1
John C. McEachen, Naval Postgraduate School
John M. Zachary, Innovative Emergency Management, Inc.
This paper presents a model for real-time network monitoring and anomaly detection that provides a holistic view of network conversation exchanges. We argue that monitoring and anomaly detection are necessary mechanisms for ensuring secure and dependable network computing infrastructure. The model for network traffic exchange is based on a modified Ehrenfest urn model and combines statistical physics and queuing theory to provide macrostate descriptions of complex networked systems when the exact microstate parameters of each element in the system precludes global understanding from first principles. The conversation exchange dynamics model for real-time network monitoring and anomaly detection is formally presented in this context as a system-driven data reduction model. The model induces a unique real-time visualization capability for network monitoring and detection of anomalous events. An implementation of the model and visualization capability is presented along with laboratory tests and successful detection of computer network attacks.
Index Terms:
Intrusion detection, network diagnostics, statistical mechanics
Citation:
John C. McEachen, John M. Zachary, "Real-Time Representation of Network Traffic Behavior for Enhanced Security," icita, vol. 2, pp.214-219, Third International Conference on Information Technology and Applications (ICITA'05) Volume 2, 2005
Usage of this product signifies your acceptance of the Terms of Use.