The Community for Technology Leaders
RSS Icon
Big Island, HI, USA
Jan. 6, 2005 to Jan. 6, 2005
ISBN: 0-7695-2268-8
pp: 309a
John C. McEachen , Naval Postgraduate School, Monterey, California
John M. Zachary , Innovative Emergency Management, Inc., Baton Rouge, Louisiana
We consider the computer network as a complex, interacting system and present a novel approach to representing anomalous events that occur within the network. This approach is essentially a form of intelligent data reduction that facilitates scalable monitoring of large systems. Specifically, we develop macrostate descriptions of complex networked systems in situations where exact microstate parameters of each element in the system preclude global understanding from first principles. This aids in identifying violations of network policy such as network attacks and misconfigurations. This approach has been verified in several environments. Example responses from network attacks simulated in the laboratory including those contained in the DARPA Lincoln Lab IDS test data as well as from operational network traffic are presented. These results suggest that our approach presents a unique perspective on anomalies in computer network traffic.
Intrusion detection, network diagnostics, statistical mechanics
John C. McEachen, John M. Zachary, "A Novel Approach to Accentuating Anomalous Events in Complex Network Systems", HICSS, 2005, Proceedings of the 38th Annual Hawaii International Conference on System Sciences, Proceedings of the 38th Annual Hawaii International Conference on System Sciences 2005, pp. 309a, doi:10.1109/HICSS.2005.35
42 ms
(Ver 2.0)

Marketing Automation Platform Marketing Automation Tool