Random projection and multiscale wavelet leader based anomaly detection and address identification in internet traffic
Romain Fontugne, Patrice Abry, Kensuke Fukuda, Pierre Borgnat, Johan Mazel, Herwig Wendt, Darryl Veitch
Abstract
We present a new anomaly detector for data traffic, ‘SMS’, based on combining random projections (sketches) with multiscale analysis, which has low computational complexity. The sketches allow ‘normal’ traffic to be automatically and robustly extracted, and anomalies detected, without the need for training data. The multiscale analysis extracts statistical descriptors, using wavelet leader tools developed recently for multifractal analysis, without any need for timescales to be selected a priori. The proposed detector is illustrated using a large recent dataset of Internet backbone traffic from the MAWI archive, and compared against existing detectors.
BibTeX
@inproceedings{icassp2015_randomprojection,
title = {Random projection and multiscale wavelet leader based anomaly detection and address identification in internet traffic},
author = {Romain Fontugne and Patrice Abry and Kensuke Fukuda and Pierre Borgnat and Johan Mazel and Herwig Wendt and Darryl Veitch},
booktitle = {ICASSP 2015},
year = {2015}
}