Abstract
As network attacks are evolving along with extreme growth in the amount of data that is present in networks, there is a significant need for faster and more effective anomaly detection methods. Even though current systems perform well when identifying known attacks, previously unknown attacks are still difficult to identify under occurrence. To emphasize, attacks that might have more than one ongoing attack vectors in one network at the same time, or also known as APT (Advanced Persistent Threat) attack, may be hardly notable since it masquerades itself as legitimate traffic. Furthermore, with the help of hiding functionality, this type of attack can even hide in a network for years. Additionally, the expected number of connected devices as well as the fast-paced development caused by the Internet of Things, raises huge risks in cyber security that must be dealt with accordingly. When considering all above-mentioned reasons, there is no doubt that there is plenty of room for more advanced methods in network anomaly detection hence more advanced statistical methods and machine learning based techniques have been proposed recently in detecting anomalies. The papers reviewed showed that different methods vary greatly in their performance to detect anomalies. Every method had its advantages and disadvantages, however most of the presented methods cannot detect previously unknown attacks but on the contrary, for example, detects DDoS attacks extremely well.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Andropov, S., Guirik, A., Budko, M., Budko, M.: Network anomaly detection using artificial neural networks. In: 2017 20th Conference of Open Innovations Association (FRUCT) (2017). https://doi.org/10.23919/FRUCT.2017.8071288
Aygun, R.C., Yavuz, A.G.: Network anomaly detection with stochastically improved autoencoder based models. In: 2017 IEEE 4th International Conference on Cyber Security and Cloud Computing, pp. 193–198 (2017). https://doi.org/10.1109/CSCloud.2017.39
Yuan, X., Li, C., Li, X.: DeepDefense: identifying DDoS attack via deep learning. In: 2017 IEEE International Conference on Smart Computing (SMARTCOMP) (2017). https://doi.org/10.1109/SMARTCOMP.2017.7946998
Kim, J., Yoo, A., Sim, A., Suh, S., Kim, I.: A lightweight network anomaly detection technique. In: 2017 Workshop on Computing, Networking and Communications (CNC) (2017). https://doi.org/10.1109/ICCNC.2017.7876251
Iordache, M., Jouet, S., Marnerides, A.K., Dimitrios, P.P.: Distributed, multi-level network anomaly detection for datacentre networks. In: IEEE ICC 2017 Next Generation Networking and Internet Symposium (2017). https://doi.org/10.1109/ICC.2017.7996569
Terzi, D.S., Terzi, R., Sagiroglu, S.: Big data analytics for network anomaly detection from netflow data. In: 2017 International Conference on Computer Science and Engineering (UBMK), pp. 592–597 (2017). https://doi.org/10.1109/UBMK.2017.8093473
Elkhadir, Z., Chougdali, K., Benattou, M.: Combination of R1-PCA and median LDA for anomaly network detection. In: Intelligent Systems and Computer Vision (ISCV) (2017). https://doi.org/10.1109/ISACV.2017.8054985
Ussath, M. Jaeger, D., Cheng, F., Meinel, C.: Advanced persistent threats: behind the scenes. In: 2016 Annual Conference on Information Science and Systems (CISS) (2016). https://doi.org/10.1109/CISS.2016.7460498
Pamukchiev, A., Jouet, S., Pezaros, D.P.: Distributed network anomaly detection on an event processing framework. In: 2017 14th IEEE Annual Consumer Communications & Networking Conference (CCNC), pp. 659–664 (2017).https://doi.org/10.1109/CCNC.2017.7983209
Callegari, C., Giordano, S., Pagano, M.: Entropy-based network anomaly detection. In: 2017 International Conference on Computing, Networking and Communications (ICNC): Communications and Information Security Symposium (2017). https://doi.org/10.1109/ICCNC.2017.7876150
Dromard, J., Owezarski, P.: Integrating short history for improving clustering based network traffic anomaly detection. In: 2017 IEEE 2nd International Workshops on Foundations and Applications of Self* Systems (FAS*W), pp. 227–234 (2017). https://doi.org/10.1109/FAS-W.2017.152
Liu, Y., et al.: Network anomaly detection based on dynamic hierarchical clustering of cross domain data. In: 2017 IEEE International Conference on Software Quality, Reliability and Security (Companion Volume), pp. 200–204 (2017). https://doi.org/10.1109/FAS-W.2017.152
Ivannikova, E., Zolotukhin, M., Hämäläinen, T.: Probabilistic transition-based approach for detecting application-layer DDoS attacks in encrypted software-defined networks. In: Yan, Z., Molva, R., Mazurczyk, W., Kantola, R. (eds.) NSS 2017. LNCS, vol. 10394, pp. 531–543. Springer, Cham (2017). https://doi.org/10.1007/978-3-319-64701-2_40
Baddar, S., Merlo, A., Migliardi, M.: Anomaly detection in computer networks: a state-of-the-art review. J. Wirel. Mob. Netw. Ubiquitous Comput. Dependable Appl. (JoWUA) 5, 29–64 (2014). https://www.researchgate.net/publication/270274504_Anomaly_Detection_in_Computer_Networks_A_StateoftheArt_Review
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2018 Springer Nature Switzerland AG
About this paper
Cite this paper
Bodström, T., Hämäläinen, T. (2018). State of the Art Literature Review on Network Anomaly Detection. In: Galinina, O., Andreev, S., Balandin, S., Koucheryavy, Y. (eds) Internet of Things, Smart Spaces, and Next Generation Networks and Systems. NEW2AN ruSMART 2018 2018. Lecture Notes in Computer Science(), vol 11118. Springer, Cham. https://doi.org/10.1007/978-3-030-01168-0_9
Download citation
DOI: https://doi.org/10.1007/978-3-030-01168-0_9
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-01167-3
Online ISBN: 978-3-030-01168-0
eBook Packages: Computer ScienceComputer Science (R0)