scholarly journals Characterising Anomalous Events Using Change - Point Correlation on Unsolicited Network Traffic

Author(s):  
Ejaz Ahmed ◽  
Andrew Clark ◽  
George Mohay
2018 ◽  
Vol 44 ◽  
pp. 00052 ◽  
Author(s):  
Darya Lavrova ◽  
Pavel Semyanov ◽  
Anna Shtyrkina ◽  
Peter Zegzhda

Digital production integrates with all the areas of human activity including critical industries, therefore the task of detecting network attacks has a key priority in protecting digital manufacture systems. This article offers an approach for analysis of digital production security based on evaluation of a posteriori probability for change point in time-series, which are based on the change point coefficient values of digital wavelet-transform in the network traffic time-series. These time-series make it possible to consider the network traffic from several points of view at the same time, which plays an important role in the task of detecting network attacks. The attack methods vary significantly; therefore, in order to detect them it is necessary to monitor different values of various traffic parameters. The proposed method has demonstrated its efficiency in detecting network service denial attacks (SlowLoris and HTTP DoS) being realized at the application level.


Sign in / Sign up

Export Citation Format

Share Document