NABOH system: Gathering intelligence from traffic patterns

Authors

Angelica M. Delgado, University of Texas-Pan American

Date of Award

8-2005

Document Type

Thesis

Degree Name

Master of Science (MS)

Department

Computer Science

First Advisor

Dr. Richard H. Fowler

Second Advisor

Dr. Zhixiang Chen

Third Advisor

Dr. Wendy A. Lawrence-Fowler

Abstract

Network traffic anomalies are important indicators of problematic traffic over a network. Network activity has patterns associated with it depending on the applications running on the local hosts connected to the network. There are traffic parameters into which network traffic of a local host can be divided: bandwidth usage, number of remote hosts that a local host is connecting to and vice versa, and number of ports used by the local host. This thesis develops a system for detecting and profiling network anomalies by analyzing traffic parameters using intelligent computational techniques. The developed system gathers intelligence by examining only the headers of IP packets. Thus the system is referred to as NABOH (Network Anomalies Based On Headers).

Comments

Copyright 2005 Angelica M. Delgado. All Rights Reserved.

https://go.openathens.net/redirector/utrgv.edu?url=https://www.proquest.com/dissertations-theses/naboh-system-gathering-intelligence-traffic/docview/305367421/se-2?accountid=7119

Granting Institution

University of Texas-Pan American