none3noThe evaluation of network traffic entropy is very useful for management purposes, since it helps to keep track of changes in network flow distribution. Nowadays, network traffic entropy is usually estimated in centralized monitoring collectors, which require a significant amount of information to be retrieved from switches. The advent of programmable data planes in Software-Defined Networks helps mitigate this issue, opening the door to the possibility of estimating entropy directly in the switches' data plane. Unfortunately, the most widely-adopted programming language used to program the data plane, called P4, lacks supporting many arithmetic operations such as logarithm and exponential function computation, which are necessary for...
Traffic matrices are required inputs for many IP network management tasks, such as capacity planning...
The thermodynamic entropy of an ATM traffic stream is a useful tool for predicting cell-loss ratios ...
The dynamics of data traffic intensity is examined using traffic measurements at the interface switc...
Using entropy of traffic distributions has been shown to aid a wide variety of network monitoring ap...
Distributed Denial-of-Service (DDoS) attacks represent a persistent threat to modern telecommunicati...
Network traffic monitoring uses empirical entropy to detect anomalous events such as various types o...
Abstract — This letter proposes an Entropy-based methodology to reduce large network traffic data se...
• Given n flows of sizes a1,..., an. Let s ≡ i ai. The empirical entropy is defined a
We develop a behavior-based anomaly detection method that detects network anomalies by comparing the...
The emergence of programmable data planes in Software-Defined Networks enables the execution of vari...
Network anomaly detection is a broad area of research. The use of entropy and distributions of traff...
Monitoring the empirical Shannon entropy of a feature in a network packet stream has previously been...
This paper describes a novel approach to classify network traffic into encrypted and unencrypted tra...
Abstract: In order to maintain consistent quality of service, computer network engineers face the ta...
Detecting anomalous traffic with low false alarm rates is of primary interest in IP networks managem...
Traffic matrices are required inputs for many IP network management tasks, such as capacity planning...
The thermodynamic entropy of an ATM traffic stream is a useful tool for predicting cell-loss ratios ...
The dynamics of data traffic intensity is examined using traffic measurements at the interface switc...
Using entropy of traffic distributions has been shown to aid a wide variety of network monitoring ap...
Distributed Denial-of-Service (DDoS) attacks represent a persistent threat to modern telecommunicati...
Network traffic monitoring uses empirical entropy to detect anomalous events such as various types o...
Abstract — This letter proposes an Entropy-based methodology to reduce large network traffic data se...
• Given n flows of sizes a1,..., an. Let s ≡ i ai. The empirical entropy is defined a
We develop a behavior-based anomaly detection method that detects network anomalies by comparing the...
The emergence of programmable data planes in Software-Defined Networks enables the execution of vari...
Network anomaly detection is a broad area of research. The use of entropy and distributions of traff...
Monitoring the empirical Shannon entropy of a feature in a network packet stream has previously been...
This paper describes a novel approach to classify network traffic into encrypted and unencrypted tra...
Abstract: In order to maintain consistent quality of service, computer network engineers face the ta...
Detecting anomalous traffic with low false alarm rates is of primary interest in IP networks managem...
Traffic matrices are required inputs for many IP network management tasks, such as capacity planning...
The thermodynamic entropy of an ATM traffic stream is a useful tool for predicting cell-loss ratios ...
The dynamics of data traffic intensity is examined using traffic measurements at the interface switc...