@inproceedings{a41fc4ffbe2f4b03b293f6250e79719c,
title = "Univariate Distribution Differences and Conditional Variables in Multivariate Data Associations as Network Flow Measures to Detect Network Attacks",
abstract = "Network flow data can be used to detect network attacks which manifest deviations from profiles of normal network flows. This paper presents several measures of network flows to detect network attacks. These network flow measures are established from an analytical study of network flow data from benign network activities and network attacks provided by Canadian Institute of Cybersecurity. Both univariate and multivariate analyses of network flow data are carried out to examine differences between benign network activities and network attacks in univariate frequency distributions and multivariate data associations of network flow variables. The univariate measure of network flows is established to detect network attacks using a measure of distribution difference and the number of network flow variables showing the distribution difference greater than a certain threshold. The multivariate measure of network flows are established to detect network attacks using the number of network flow variables smaller than a certain threshold and the absence of certain network flow variables in conditional variable values of multivariate data associations. ",
keywords = "Network flow data, Network intrusion detection, Univariate and multivariate data analysis",
author = "Nong Ye and Fok, {Ting Yan} and Douglas Montgomery",
note = "Funding Information: This study is carried out with the funding support of Dr. Nong Ye as a faculty researcher with the National Institute of Standards and Technology. Publisher Copyright: {\textcopyright} 2021 ACM.; 6th International Conference on Big Data and Computing, ICBDC 2021 ; Conference date: 22-05-2021 Through 24-05-2021",
year = "2021",
month = may,
day = "22",
doi = "10.1145/3469968.3469975",
language = "English (US)",
series = "ACM International Conference Proceeding Series",
publisher = "Association for Computing Machinery",
pages = "41--48",
booktitle = "ICBDC 2021 - 2021 6th International Conference on Big Data and Computing",
}