On the use of sketches and wavelet analysis for network anomaly detection

In the last few years, the number and impact of security attacks over the Internet have been continuously increasing. Since it seems impossible to guarantee complete protection to a system by means of the "classical" prevention mechanisms, the use of Intrusion Detection Systems has emerged as a key element in network security. In this paper we address the problem considering a novel technique for detecting network anomalies. Our approach is based on the combined use of sketch and wavelet analysis to reveal the anomalies present in data collected at the router level. The performance analysis, presented in this paper, demonstrates the effectiveness of the proposed method.