International Workshop on Distributed Systems: Operations and Management

DSOM 2007: Managing Virtualization of Networks and Services pp 191-194

NADA – Network Anomaly Detection Algorithm

  • Sílvia Farraposo
  • Philippe Owezarski
  • Edmundo Monteiro
Conference paper

DOI: 10.1007/978-3-540-75694-1_18

Volume 4785 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Farraposo S., Owezarski P., Monteiro E. (2007) NADA – Network Anomaly Detection Algorithm. In: Clemm A., Granville L.Z., Stadler R. (eds) Managing Virtualization of Networks and Services. DSOM 2007. Lecture Notes in Computer Science, vol 4785. Springer, Berlin, Heidelberg

Abstract

This paper deals with a new iterative Network Anomaly Detection Algorithm – NADA, which accomplishes the detection, classification and identification of traffic anomalies. NADA fully provides all information required limiting the extent of anomalies by locating them in time, by classifying them, and identifying their features as, for instance, the source and destination addresses and ports involved. To reach its goal, NADA uses a generic multi-featured algorithm executed at different time scales and at different levels of IP aggregation. Besides that, the NADA approach contributes to the definition of a set of traffic anomaly behavior-based signatures. The use of these signatures makes NADA suitable and efficient to use in a monitoring environment.

Keywords

Traffic Anomaly IdentificationAnomaly Signature
Download to read the full conference paper text

Copyright information

© IFIP International Federation for Information Processing 2007

Authors and Affiliations

  • Sílvia Farraposo
    • 1
  • Philippe Owezarski
    • 2
  • Edmundo Monteiro
    • 3
  1. 1.School of Technology and Management of Leiria, Alto-Vieiro, Morro do Lena, 2411-901 Leiria, Apartado 4163Portugal
  2. 2.LAAS – CNRS, 7 Avenue du Colonel Roche, 31077 Toulouse, CEDEX 4France
  3. 3.Laboratory of Communications and Telematics, Computer Science Department, Pólo II – Pinhal de Marrocos, 3030-290 CoimbraPortugal