loading...
Detection of Interdomain Routing Anomalies Based on Higher-Order Path Analysis
Hong Kong December 18-December 22
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ICDM.2006.52Sixth IEEE International Conference o ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Murat Can Ganiz, Lehigh University, USA
Sudhan Kanitkar, Lehigh University, USA
Mooi Choo Chuah, Lehigh University, USA
William M. Pottenger, Rutgers University, USA
Anomalous interdomain Border Gateway Protocol (BGP) events including misconfigurations, attacks and large-scale power failures often affect the global routing infrastructure. Thus, the ability to detect and categorize such events is extremely useful. In this article we present a novel anomaly detection technique for BGP that distinguishes between different anomalies in BGP traffic. This technique is termed Higher Order Path Analysis (HOPA) and focuses on the discovery of patterns in higher order paths in supervised learning datasets. Our results demonstrate that not only worm events but also different types of worms as well as blackout events are cleanly separable and can be classified in real time based on our incremental approach. This novel approach to supervised learning has potential applications in cybersecurity/forensics and text/data mining in general.
Citation:
Murat Can Ganiz, Sudhan Kanitkar, Mooi Choo Chuah, William M. Pottenger, "Detection of Interdomain Routing Anomalies Based on Higher-Order Path Analysis," icdm, pp.874-879, Sixth IEEE International Conference on Data Mining (ICDM'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions