NETWORK TRAFFIC DESCRIPTION WITH PROTOCOL SPECIFIC PROFILES BASED ON SEPARATE TREATMENT OF TAIL COMPONENTS

摘要

It is an important task of network management to discover network traffic "anomalies" as early as possible. RMON2 probe data are used to model protocol specific traffic characteristics, called profiles. The profiles developed in this paper help detecting anomalies by characterizing network traffic in a new way based on traffic classification. This approach is suitable for both proactive management and anomaly detection in network security management.