Understanding and evaluating the impact of sampling on anomaly detection techniques

Androulidakis, G; Chatzigiannakis, V; Papavassiliou, S; Grammatikou, M; Maglaris, V

dc.contributor.author	Androulidakis, G	en
dc.contributor.author	Chatzigiannakis, V	en
dc.contributor.author	Papavassiliou, S	en
dc.contributor.author	Grammatikou, M	en
dc.contributor.author	Maglaris, V	en
dc.date.accessioned	2014-03-01T02:51:17Z
dc.date.available	2014-03-01T02:51:17Z
dc.date.issued	2007	en
dc.identifier.uri	https://dspace.lib.ntua.gr/xmlui/handle/123456789/35451
dc.subject.other	Algorithms	en
dc.subject.other	Data acquisition	en
dc.subject.other	Packet networks	en
dc.subject.other	Principal component analysis	en
dc.subject.other	Sampling	en
dc.subject.other	Telecommunication traffic	en
dc.subject.other	Anomaly detection	en
dc.subject.other	Change-point detection method	en
dc.subject.other	Packet sampling techniques	en
dc.subject.other	Intrusion detection	en
dc.title	Understanding and evaluating the impact of sampling on anomaly detection techniques	en
heal.type	conferenceItem	en
heal.identifier.primary	10.1109/MILCOM.2006.302407	en
heal.identifier.secondary	4086338	en
heal.identifier.secondary	http://dx.doi.org/10.1109/MILCOM.2006.302407	en
heal.publicationDate	2007	en
heal.abstract	In this paper, the emphasis is placed on the evaluation of the impact of various packet sampling techniques that have been proposed in the PSAMP IETF draft, on two widely used anomaly detection approaches. More specifically, we evaluate the behavior of a sequential nonparametric change-point detection method and an algorithm based on Principal Component Analysis (PCA) with the use of different metrics, under different traffic and measurement sampling methodologies. One of the key objectives of our study is to gain some insight about the feasibility and scalability of the anomaly detection process, by analyzing and understanding the tradeoff of reducing the volume of collected data while still maintaining the accuracy and effectiveness in the anomaly detection.	en
heal.journalName	Proceedings - IEEE Military Communications Conference MILCOM	en
dc.identifier.doi	10.1109/MILCOM.2006.302407	en