Analysis of Payload Based Application level Network Anomaly Detection

Most network anomaly detection research is based on packet header fields, while the payload is usually discarded. Preventing unknown attacks and Internet worms has led to a need for application level network anomaly detection. Payload based detection schemes in experiments are often misleading. In this paper, we discuss the problems associated with the experimental results. In the first section, a brief review will be given for application level anomaly detection research.

• Type: Conference
• Year: 2007
• Where: HICSS
• Authors: Like Zhang, Gregory B. White
• Keywords: Anomaly Detection, Biometrics, Detection Research, HICSS 2007, Network Anomaly Detection, System Sciences