Authors:
Muhammad Fermi Pasha
1
;
Rahmat Budiarto
1
and
Masashi Yamada
2
Affiliations:
1
School of Computer Sciences, University of Sains Malaysia, Malaysia
;
2
School of Computer and Cognitive Sciences, Chukyo University, Japan
Keyword(s):
Adaptive System, Distributed Network Monitoring, Network Anomaly, Evolving Connectionist Systems.
Related
Ontology
Subjects/Areas/Topics:
Communication and Software Technologies and Architectures
;
Data Communication Networking
;
e-Business
;
Enterprise Information Systems
;
Information and Systems Security
;
Intrusion Detection & Prevention
;
Network and Service Management
;
Network Management
;
Telecommunications
;
Wireless Information Networks and Systems
Abstract:
When diagnosing network problems, it is desirable to have a view of the traffic inside the network. This can be achieved by profiling the traffic. A fully profiled traffic can contain significant information of the network’s current state, and can be further used to detect anomalous traffic and manage the network better. Many has addressed problems of profiling network traffic, but unfortunately there are no specific profiles could lasts forever for one particular network, since network traffic characteristic always changes over and over based on the sum of nodes, software that being used, type of access, etc. This paper introduces an online adaptive system using Evolving Connectionist Systems to profile network traffic in continuous manner while at the same time try to detect anomalous activity inside the network in real-time and adapt with changes if necessary. Different from an offline approach, which usually profile network traffic using previously captured data for a certain per
iod of time, an online and adaptive approach can use a shorter period of data capturing and evolve its profile if the characteristic of the network traffic has changed.
(More)