Entropy-based analysis of user IP space (情報ネットワーク)
スポンサーリンク
概要
- 論文の詳細を見る
Although the concept of entropy was originally a thermodynamic construct, it has been adapted in other fields of study, including information theory. The definition of information entropy is expressed in terms of a discrete set of probabilities which is also a measure of how much information can be obtained averagely. We have developed an entropy-based approach to analyze the difference among users in aggregated IP space with a set of activities used to detect anomalies such as worm attack and other malicious user activities. We offer simulation results which prove that our approach is effective and scales well.
- 社団法人電子情報通信学会の論文
- 2007-12-06
著者
-
Tanaka Yoshiaki
Global Information And Telecommunication Institute Waseda University:research Institute For Science
-
Zhanikeev Marat
Waseda Univ. Tokyo Jpn
-
Zhanikeev Marat
School Of International Liberal Studies Waseda University
-
LU Zhenxing
Global Information and Telecommunication Institute, Waseda University
-
Lu Zhenxing
Global Information And Telecommunication Institute Waseda University
-
Tanaka Yoshiaki
Global Information And Telecommunication Institute Waseda University:research Institute For Science
-
Tanaka Yoshiaki
Global Information And Telecommunication Institute Waseda University:research Institute For Science
-
Tanaka Yoshiaki
Global Information And Telecommunication Institute Waseda University
-
Tanaka Yoshiaki
Global information and Teleco mmunication Institute Was eda University:Research Institute for Science and Engineeing Was eda University
関連論文
- Effect of incomplete data on delay space dimensionality (情報通信マネジメント)
- Web multimedia throughput: methodology and analysis (ライフインテリジェンスとオフィス情報システム)
- Wavelength multicasting among restricted users in AWG-based WDM PON access network (ネットワークシステム)
- Squeezing Out the Best of End-to-End Performance
- BS-7-7 A Dutch-Auction Pricing Mechanism for Network Congestion Control(BS-7. Network Planning, Control and Management)
- BS-7-36 Processing Overhead in IP Traffic Analysis(BS-7. Network Planning, Control and Management)
- Comparison between two methods of IP traffic analysis (情報通信マネジメント)
- BS-3-3 IP Arrival Processes in Backbone Traffic
- A Two-Stage Simulated Annealing Logical Topology Reconfiguration in IP over WDM Networks(Internet)
- B-6-160 A Logical Topology Reconfiguration with Simulated Annealing in IP over WDM Networks
- SB-10-8 A Fast Neighbour Discovery Simulated Annealing for Logical Topology Design in IP/WDM Networks
- B-6-36 Logical Topology Reconfiguration Trade-off in IP/WDM Optical Networks
- Dynamic Multicast Routing with Predetermined Path Approach for Layered Streams(Traffic Controling CDNs)(Special Issue on Content Delivery Networks)
- A Method to Reduce the External Blocking in the Batcher Banyan Network with Incomplete Copy Network
- Dynamic Multicast Routing Algorithm Using Predetermined Path Search
- Virtual-Cost-Based Algorithm for Dynamic Multicast Routing in Satellite-Terrestrial Networks
- Hash-Based Query Caching Method for Distributed Web Caching in Wide Area Networks (Special Issue on Distributed Processing for Controlling Telecommunications Systems)
- BS-12-33 Simplifying High-Speed Backbone Traffic for Replaying(BS-12. Network Planning, Control, and Management)
- BS-10-12 A Resources Sharing Scheme for Wavelength Multicasting in AWG-based WDM PON(BS-10. Network Planning, Control, and Management)
- BS-4-2 A Design of Wavelengths Multicasting System Supporting Multiple Groups in AWG-based WDM PON(BS-4. System, control and design technologies for emerging network)
- BS-12-4 Wavelength Multicasting Capability of WDM PON Access Network(BS-12. Network Planning, Control, and Management)
- BS-15-2 A Two Stage Heuristic Topology Design Approach for WDM Grid Computing Networks(BS-15.Network Planning, Control, and Management,ENGLISH SESSION)
- Topology Design Strategy for WDM Grid Computing Networks
- BS-8-2 A Tabu Search Method of Logical Topology Design for Wavelength Routed IP Networks(BS-8. Technology and Architecture for Ubiquitous Network Systems,ENGLISH SESSION)
- BS-10-11 A Logical Topology Optimization with Tabu Search in IP over WDM Networks(BS-10. Network Planning, Control, and Management)
- BS-10-8 Meta-Heuristic Logical Topology Optimization in IP over WDM Networks(BS-10. Network Controls for High-Quality Communications)
- BS-7-34 How to Model Terminal Equipment in Simulation(BS-7. Network Planning, Control and Management)
- Things you should know about your Terminal Equipment (情報通信マネジメント)
- BS-3-26 Best Distribution Fitting for Terminal Equipment Performance
- BS-10-2 Distributed Traffic Replay(BS-10. Network Planning, Control, and Management)
- BS-10-1 Analysis of Throughput Reliability in Complex Networks(BS-10. Network Planning, Control, and Management)
- Practical issues with replay of high throughput traffic (情報通信マネジメント)
- Directional active probing in real network services (情報通信マネジメント)
- BS-4-19 Synthesis of Unobtrusive Flash Crowds in Traffic Traces(BS-4. System, control and design technologies for emerging network)
- Efficiency issues in end-to end available bandwidth measurement techniques (テレコミュニケーションマネジメント)
- BS-10-2 End-to-End Available Bandwidth Prediction Using ABsnap and Neural Network
- BS-15-14 Active Measurements in IP over WDM Environment(BS-15.Network Planning, Control, and Management,ENGLISH SESSION)
- BS-15-13 Available Bandwidth Measurement Using Different Probing Patterns(BS-15.Network Planning, Control, and Management,ENGLISH SESSION)
- BT-3-2 Active Measurements in NGN Scenarios(BT-3. NGN Service in the era of IP convergence)
- B-6-111 Reward-Maximized CAC and Routing for Multi-Point Connections
- BS-7-6 Economics of ISP Multi-Homing(BS-7. Network Planning, Control and Management)
- BS-3-27 Oligopoly of Parallel-Serial Network Connectivity
- BS-10-15 An Analysis of ISP Interconnection Market
- BS-4-18 A Model of Two-Stage Game for ISP Peering Networks(BS-4. System, control and design technologies for emerging network)
- BS-12-28 Potential Internet Balkanization as a Dangerous Phenomenon for Telecommunication(BS-12. Network Planning, Control, and Management)
- BS-3-13 Stackelberg Game for Interconnection between Large ISPs and Small ISPs(BS-3. Network Management Technologies for Next Generation Network)
- BS-4-21 Evaluation of Active Probing Tools in Varying Traffic Conditions(BS-4. System, control and design technologies for emerging network)
- BS-12-31 Statistical Analysis of Active Probing Tools(BS-12. Network Planning, Control, and Management)
- BS-3-2 Time Series Analysis for Active Probing Results(BS-3. Network Management Technologies for Next Generation Network)
- BS-10-5 Verifying Quality of Active Measurement Results(BS-10.Network Planning, Control, and Management,symposium)
- Component Analysis in Traffic and Detection of Anomalies(次世代ネットワークとマネジメントシステム技術の潮流及び一般)
- BS-10-12 Pattern Analysis and Modelling of Willingness to Receive Reward for Relay in Ad Hoc Networks(BS-10.Network Planning, Control, and Management,symposium)
- B-6-172 A Wavelength Assignment with Fairness Consideration in Optical Packet Switching Ring Networks
- BS-4-26 Price and Capacity Competition among Large ISPs(BS-4. Network Design, Management and Control for Future Networked Systems)
- BS-4-24 Comparison between Dutch-Auction Congestion Pricing and Gradient Projection Congestion Pricing(BS-4. Network Design, Management and Control for Future Networked Systems)
- BS-4-4 Admission Control Algorithms Integrated with Pricing for Revenue Optimization in Wireless Local Access Networks(BS-4. Network Design, Management and Control for Future Networked Systems)
- BS-7-8 Pricing of Wireless Local Access Network by Considering Compensation for Collisions(BS-7. Network Planning, Control and Management)
- BS-3-11 Pricing of Wireless Access Network Using Second-Price Auction Protocol
- BS-10-21 Wireless Network Access Market Using Threshold Price Double Auction Protocol
- BS-4-8 A Deployable E2E Quality-of-Service Routing Algorithm(BS-4. Network Design, Management and Control for Future Networked Systems)
- SB-4-5 Advantages of Dynamic End-to-End Bottleneck Probing
- BS-4-43 Influence of Probing Parameters on Terminal Equipment Performance(BS-4. Network Design, Management and Control for Future Networked Systems)
- A New End-to-End Available Bandwidth Measurement Scheme Using Active Probing
- A New End-to-End Available Bandwidth Measurement Scheme Using Active Probing(サービス管理・ビジネス管理,料金管理,及び一般)
- BS-8-16 An Active End-to-End Available Bandwidth Measurement Scheme(BS-8. Technology and Architecture for Ubiquitous Network Systems,ENGLISH SESSION)
- BS-10-12 Detection of P2P Traffic at Packet Flow Level(BS-10. Network Planning, Control, and Management)
- BS-10-1 Lightweight Discrete Utilization Jitter Estimation(BS-10. Network Planning, Control, and Management)
- BS-10-6 What Do Packet Trains Measure?(BS-10. Network Controls for High-Quality Communications)
- BS-3-4 Packet Flow Based Scheduling Model by Evolutionary Algorithm
- Valuable properties in spatial clustering of end-to-end delay space (情報ネットワーク)
- BS-7-33 Problem of Probing Directionality(BS-7. Network Planning, Control and Management)
- BS-3-3 Sensitivity of Entropy-based Analysis to Detect Infected Hosts(BS-3. Network Management Technologies for Next Generation Network)
- Entropy-based analysis of user IP space (情報ネットワーク)
- BS-7-39 QoS Call Setup for End-to-End QoS Provisioning : Top-Down Approach versus Bottom-Up Approach(BS-7. Network Planning, Control and Management)
- BS-10-9 Detecting Anomalies Using Flow Signature
- BS-8-18 Detection of Anomalies by Analysis of Traffic Components(BS-8. Technology and Architecture for Ubiquitous Network Systems,ENGLISH SESSION)
- BS-10-7 WDM Node Architectures with Limited Range Wavelength Converter Sharing(BS-10. Network Controls for High-Quality Communications)
- BS-10-3 Robust Search Indices From Active Measurement Results
- BS-4-20 Directionality of Packet-Pair Active Probes in Practice(BS-4. System, control and design technologies for emerging network)
- Short-Memory Properties in Traffic Analysis
- BS-8-17 A Simple Paradigm for Many-to-Many Tomography(BS-8. Technology and Architecture for Ubiquitous Network Systems,ENGLISH SESSION)
- BS-15-11 Network Anomaly Detection and Identification(BS-15.Network Planning, Control, and Management,ENGLISH SESSION)
- Network positioning for inter-ISP services (情報通信マネジメント)
- BS-3-4 Performance Analysis of Extra-Large Network Simulations(BS-3. Network Management Technologies for Next Generation Network)
- BS-12-32 Accuracy in Overhead-Constrained Network Coordinate Systems(BS-12. Network Planning, Control, and Management)
- Applications of IP aggregation for network anomaly detection (ネットワークシステム)
- Issues with using real packet traces in simulated environments (テレコミュニケーションマネジメント)
- BS-12-30 Traffic Statistics of an ISP in Mongolia(BS-12. Network Planning, Control, and Management)
- BS-6-1 QoS Management and Load Balancing in Wireless LANs(BS-6. Planning, Control and Management on Networks and Services)
- Characterizing source distribution in web server user community (テレコミュニケーションマネジメント)
- BS-10-20 Auction Pricing Scheme for Adaptive Applications
- BS-4-6 Nash Bargaining Solution in a Congestion Price Scheme(BS-4. System, control and design technologies for emerging network)
- Performance analysis of dynamic pricing scheme to control network congestion (情報通信マネジメント)
- BS-12-36 Dynamic Pricing Scheme as a Congestion Control to Improve Service Quality(BS-12. Network Planning, Control, and Management)
- Practical models for multi-hop end-to-end network paths (情報通信マネジメント)
- BS-6-39 A Trust-aware Management Strategy Against Black Hole Attacks in MANET(BS-6. Planning, Control and Management on Networks and Services)
- QoS provisioning and load distribution in federated wireless LANs (情報ネットワーク)
- BDS-1-2 Capturing QoS Context by Alternative Flow Monitoring in Clouds
- BS-3-4 Alternative Packet Sampling for Improved Fairness and Function(BS-3. Management and Control Technologies for Innovative Networks)
- BDS-1-2 Capturing QoS Context by Alternative Flow Monitoring in Clouds