The Community for Technology Leaders
2014 47th Hawaii International Conference on System Sciences (2005)
Big Island, Hawaii
Jan. 3, 2005 to Jan. 6, 2005
ISSN: 1530-1605
ISBN: 0-7695-2268-8
pp: 309a
John M. Zachary , Innovative Emergency Management, Inc., Baton Rouge, Louisiana
John C. McEachen , Naval Postgraduate School, Monterey, California
We consider the computer network as a complex, interacting system and present a novel approach to representing anomalous events that occur within the network. This approach is essentially a form of intelligent data reduction that facilitates scalable monitoring of large systems. Specifically, we develop macrostate descriptions of complex networked systems in situations where exact microstate parameters of each element in the system preclude global understanding from first principles. This aids in identifying violations of network policy such as network attacks and misconfigurations. This approach has been verified in several environments. Example responses from network attacks simulated in the laboratory including those contained in the DARPA Lincoln Lab IDS test data as well as from operational network traffic are presented. These results suggest that our approach presents a unique perspective on anomalies in computer network traffic.
Intrusion detection, network diagnostics, statistical mechanics
John M. Zachary, John C. McEachen, "A Novel Approach to Accentuating Anomalous Events in Complex Network Systems", 2014 47th Hawaii International Conference on System Sciences, vol. 09, no. , pp. 309a, 2005, doi:10.1109/HICSS.2005.35
108 ms
(Ver )