Abstract:

In this paper,we propose a network anomalous detection optimizing method via heavy hitter flow identification.Experimental results demonstrate that the proposed method is actually effective and lightweight for heavy hitter flow identification and can benefit large-scale network anomaly detection,mitigate performance stress.

Key words: worm propagation, network anomaly detection, distributed denial-of-service