CAREER: A Multiresolution Approach to Network Anomaly and Intrusion Detection

职业：网络异常和入侵检测的多分辨率方法paul barford该项目旨在测量广域网中的流量并检测异常和入侵。这些测量将支持精确、实时地识别异常/入侵，使未来的网络能够安全有效地运行，这在当今充满敌意和动态的环境中受到严重威胁。新的原位测量系统将被建立和部署，以收集互联网上许多地点的流量数据，并以匿名、保护隐私的格式将其存储在一个中央存储库中。对数据的研究访问将通过一个私人的、安全的网络界面提供。结合测量和数据收集活动，该研究将开发基于小波的多分辨率分析方法，该方法可以在频率和时间上隔离不同的流量特征，从而能够准确及时地检测异常/入侵。将向研究界提供一个测量/分析工具库和数据存储库。此计划亦会发展一系列实验室实验，为中学生和大学生提供亲身学习互联网的方法。这项工作涉及与网络运营商、工业研究人员以及网络以外学科（包括应用数学、统计学和信号处理）的研究人员在测量和分析活动方面的合作。

CNS-0347252 CAREER: A Multiresolution Approach to Network Anomaly and Intrusion DetectionPaul BarfordThis project aims to measure traffic and detect anomalies and intrusions in wide area networks. The measurements will support precise, real-time identification of anomalies/intrusions, enabling future networks to function securely and efficiently--something that is seriously threatened in today's hostile and dynamic environment. New, in-situ measurement systems will be built and deployed to collect traffic data from many locations across the Internet and store it in a centralized repository in an anonymized, privacy preserving format. Research access to the data will be provided through a private, secure web interface. In conjunction with the measurement and data collection activity, the research will develop multiresolution analysis methods based on wavelets, which isolate distinct traffic characteristics in both frequency and time, thus enabling accurate and timely detection of anomalies/intrusions. A library of measurement/analysis tools and the data repository will be made available to the research community. This project will also develop a series of laboratory experiments to provide secondary and university students a hand-on means of learning about the Internet. This effort involves collaboration on both the measurement and analysis activities with network operators, researchers in industry and researchers in disciplines outside of networking including applied math, statistics and signal processing.