loading...
Detection and Identification of Anomalies in Wireless Mesh Networks Using Principal Component Analysis (PCA)
May 07-May 09
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/I-SPAN.2008.14The International Symposium on Parall ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Anomaly detection is becoming a powerful and necessary omponent as wireless networks gain popularity. In this paper, we evaluate the efficacy of PCA based anomaly detection for wireless mesh networks. PCA was originally developed for wired networks. Our experiments show that it is possible to detect different types of anomalies in an interference prone wireless environment. However, the sensitivity of PCA to small changes in flows prompted us to develop an anomaly identification scheme which automatically identifies the flow(s) causing the detected anomaly and their contributions in terms of number of packets. Our results show that the identification scheme is able to differentiate false alarms from real anomalies and pinpoint the culprit(s) in case of a real fault or threat. The experiments were performed over an 8 node mesh testbed deployed in an urban street layout in Sydney, under different realistic traffic scenarios. Our identification scheme facilitates the use of PCA based method for real-time anomaly detection in wireless networks as it can filter the false alarms locally at the monitoring nodes without excessive computational overhead.
Index Terms:
Anomaly detection, Wireless mesh networks, Principal component analysis
Citation:
Sara Hakami, Zainab Zaidi, Bjorn Landfeldt, Tim Moors, "Detection and Identification of Anomalies in Wireless Mesh Networks Using Principal Component Analysis (PCA)," ispan, pp.266-271, The International Symposium on Parallel Architectures, Algorithms, and Networks (i-span 2008), 2008
Usage of this product signifies your acceptance of the Terms of Use.