Rohani, Mohd. Fo'ad and Maarof, Mohd. Aizaini and Selamat, Ali (2006) Analysis of malicious traffic and its impact to QoS metric LRD and energy invariant. In: 2nd Postgraduate Annual Research Seminar (PARS'06), 24-25 May 2006, Faculty of Computer Science & Information Systems, UTM.
The Internet is evolving from a single best effort service to a multi-services network. The success of the Internet has increased its vulnerability to misuse and performance problems. The existence of network anomaly packets inside normal traffic can decrease QoS performance substantially. These anomalous events can provoke some changes in the QoS perceived by all users of the network, and then break the service level agreement (SLA) at the Internet service. It is hard to detect and distinguish malicious packet and legitimate packets in the traffic. The reason is behavior of Internet traffic is very far from being regular, and presents large variations in its throughput at all scales due to self-similarity, multi- fractality and long-range dependence (LRD). The aim of this paper is to analysis the impact of malicious network attacks (host and network attacks) on network second order QoS metric. The dynamic traffic behavior is characterized by LRD and Energy Invariant change. These changes in the LRD function and Energy Invariant therefore can give direction of developing more robust network anomaly detection. We use benchmark DARPA for our data testing. From the experiments we categorize the QoS impact into three categories: increase LRD, imitate LRD and decrease LRD.
|Item Type:||Conference or Workshop Item (Paper)|
|Additional Information:||Proceeding of the Postgraduate Annual Research Seminar 2006|
|Uncontrolled Keywords:||anomaly attacks, QoS, LRD, energy invariant, wavelet analysis|
|Subjects:||Q Science > QA Mathematics > QA76 Computer software|
|Divisions:||Computer Science and Information System (Formerly known)|
|Deposited By:||Dr Ali Selamat|
|Deposited On:||24 Oct 2007 03:43|
|Last Modified:||11 Oct 2010 08:24|
Repository Staff Only: item control page