search menu icon-carat-right cmu-wordmark

Identifying Anomalous Traffic Using Delta Traffic

January 2008 Presentation
Tsuyoshi Kondoh (NTT Corporation), Keisuke Ishibashi (NTT Corporation)

In this presentation, the authors discuss DALTAA, a system that recognizes hosts with traffic increases as attack sources and groups them into subnetworks.

Publisher:

Software Engineering Institute

Abstract

In this presentation, given at FloCon 2008, the authors discuss DALTAA, a system that recognizes hosts with sharp increases in traffic as attack sources and aggregates them into subnetworks.