With the wide deployment of flow monitoring in IP networks, the analysis of the exported flow
data has become an important research area. It has been shown that flow data can be used …

In this paper, we present a novel Flow-based Statistical Aggregation Schemes (FSAS) for
Network Anomaly Detection. An IP flow is a unidirectional series of IP packets of a given …

V. Chatzigiannakis, G. Androulidakis, M. Grammatikou, B. Maglaris Network Management &
Optimal Design Lab (NETMODE), ECE Department–National Technical University of Athens …

The aim of this paper is to suggest an Artificial Neural Network architecture for decision
making within intrusion detection systems. Taking as starting point the IMA_IDS solution [57] …

Classification of intrusion attacks and normal network flow is a critical and challenging issue
in network security study. Many intelligent intrusion detection models are proposed, but their …

Flow level measurements are used to provide insights into the traffic flow crossing a network
link. However, existing flow based network detection devices lack adaptive reconfigure …

A normal traffic includes a plurality of packets in the same session, while most attack traffic
consists of single packets generated in a single session. This papar relates to a method for …

Flooding-based distributed denial-of-service (DDoS) attacks present a serious and major
threat to the targeted enterprises and hosts. Current protection technologies are still largely …