An improvement of the state-of-the-art covariance-based methods for statistical anomaly detection algorithms

作者：Fortunati Stefano^*; Gini Fulvio; Greco Maria S; Farina Alfonso; Graziano Antonio; Giompapa Sofia

来源：Signal, Image and Video Processing, 2016, 10(4): 687-694.

DOI：10.1007/s11760-015-0796-y

• Intrusion detection system
• Statistical anomaly detection
• Covariance matrix
• Flooding attacks

This paper presents a possible improvement to one of the main statistical anomaly detection algorithms for cyber security applications, i.e., the covariance-based method. This algorithm employs covariance matrices to build a norm profile of the normal network traffic and to detect anomalous activities in the data flow. In order to improve the detection capabilities of this algorithm, we propose a modified version of the statistical decision rule based on a generalized version of the Chebyshev inequality for random vectors. The performance of the proposed algorithm is evaluated and compared, in terms of ROC (receiver operating characteristic) curves with the ones of the state-of-the-art covariance-based algorithm.

• 出版日期2016-4