Statistical anomaly detection on real e-mail traffic (Articolo in rivista)

Type
Label
  • Statistical anomaly detection on real e-mail traffic (Articolo in rivista) (literal)
Anno
  • 2009-01-01T00:00:00+01:00 (literal)
Alternative label
  • M. Aiello, D. Chiarella, G. Papaleo (2009)
    Statistical anomaly detection on real e-mail traffic
    in Journal of information assurance and security
    (literal)
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#autori
  • M. Aiello, D. Chiarella, G. Papaleo (literal)
Pagina inizio
  • 604 (literal)
Pagina fine
  • 611 (literal)
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#numeroVolume
  • 4 (literal)
Rivista
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#numeroFascicolo
  • 4 (literal)
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#affiliazioni
  • Maurizio Aiello1, Davide Chiarella1 2 and Gianluca Papaleo1 2 1 1 - National Research Council, IEIIT, Genoa, Italy 2 - University of Genoa, Department of Computer and Information Sciences, Italy (literal)
Titolo
  • Statistical anomaly detection on real e-mail traffic (literal)
Abstract
  • There are many recent studies and proposal in Anomaly Detection Techniques, especially in worm and virus detection. In this field it does matter to answer few important questions like at which ISO/OSI layer data analysis is done and which approach is used. Furthermore these works suffer of scarcity of real data due to lack of network resources or privacy problem: almost every work in this sector uses synthetic ( e.g. DARPA) or pre-made set of data. Our study is based on layer seven quantities (number of e-mail sent in a chosen period): we analyzed quantitatively our network e-mail traffic and applied our method on gathered data to detect indirect worm infection (worms which use e-mail to spread infection). The method is a threshold method and, in our dataset, it identified various worm activities. In this document we show our data analysis and results in order to stimulate new approaches and debates in Anomaly Intrusion Detection Techniques. (literal)
Prodotto di
Autore CNR
Insieme di parole chiave

Incoming links:


Prodotto
Autore CNR di
Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#rivistaDi
Insieme di parole chiave di
data.CNR.it