%0 Conference Proceedings
%T NetFlow Anomaly Detection Though Parallel Cluster Density Analysis in Continuous Time-Series
%+ Athlone Institute of Technology
%+ IDA Business Park
%+ NPD Group
%+ University of New South Wales [Sydney] (UNSW)
%A Flanagan, Kieran
%A Fallon, Enda
%A Connolly, Paul
%A Awad, Abir
%Z Part 5: Information Technology
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 15th International Conference on Wired/Wireless Internet Communication (WWIC)
%C St. Petersburg, Russia
%Y Yevgeni Koucheryavy
%Y Lefteris Mamatas
%Y Ibrahim Matta
%Y Aleksandr Ometov
%Y Panagiotis Papadimitriou
%I Springer International Publishing
%3 Wired/Wireless Internet Communications
%V LNCS-10372
%P 221-232
%8 2017-06-21
%D 2017
%R 10.1007/978-3-319-61382-6_18
%K Anomaly detection
%K NetFlow
%K Clustering
%K Density analysis
%Z Computer Science [cs]
%Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers
%X The increase in malicious network based attacks has resulted in a growing interest in network anomaly detection. The ability to detect unauthorized or malicious activity on a network is of importance to any organization. With the increase in novel attacks, anomaly detection techniques can be more successful in detecting unknown malicious activity in comparison to traditional signature based methods. However, in a real-world environment, there are many variables that cannot be simulated. This paper proposes an architecture where parallel clustering algorithms work concurrently in order to detect abnormalities that may be lost while traversing over time-series windows. The presented results describe the NetFlow activity of the NPD Group, Inc. over a 24-hour period. The presented results contain real-world anomalies that were detected.
%G English
%Z TC 6
%Z WG 6.2
%2 https://inria.hal.science/hal-01675428/document
%2 https://inria.hal.science/hal-01675428/file/453598_1_En_18_Chapter.pdf
%L hal-01675428
%U https://inria.hal.science/hal-01675428
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-TC6
%~ IFIP-WG6-2
%~ IFIP-WWIC
%~ IFIP-LNCS-10372