Network Traffic Anomaly Detection Based on Self-Similarity Using HHT and Wavelet Transform

被引：8

作者：

Cheng, Xiaorong ^{[1
]}

Xie, Kun ^{[1
]}

Wang, Dong ^{[1
]}

机构：

[1] N China Elect Power Univ, Sch Comp Sci & Technol, Baoding, Peoples R China

来源：

FIFTH INTERNATIONAL CONFERENCE ON INFORMATION ASSURANCE AND SECURITY, VOL 1, PROCEEDINGS | 2009年

关键词：

anomaly detection; HHT; EMD; wavelet transform; self-Similar;

D O I：

10.1109/IAS.2009.219

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

Network traffic anomaly detection can be done through the self-similar analysis of network traffic. In this case, the abnormal condition of network can be indicated by investigating if the performance parameters of real time data locate at the acceptable ranges. A common method of estimating self-similar parameter is the Wavelet transform. However, the Wavelet transform fails to exclude the influence of non-stationary signal's periodicity and trend term. In view of the fact that Hilbert-Huang Transform (HHT) has unique advantage on non-stationary signal treatment, in this paper, a refined self-similar parameter estimation algorithm is designed through the combination of wavelet analysis and Hilbert-Huang Transform and a set of experiments are run to verify the improvement in the accuracy of parameter estimation and network traffic anomaly detection.

引用

页码：710 / 713

页数：4