Sliding Modes for Anomaly Observation in TCP Networks: From Theory to Practice

Sandy Rahme 1 Yann Labit 2 Frédéric Gouaisbaut 3 Thierry Floquet 4, 5
2 LAAS-SARA - Équipe Services et Architectures pour Réseaux Avancés
LAAS - Laboratoire d'analyse et d'architecture des systèmes [Toulouse]
3 LAAS-MAC - Équipe Méthodes et Algorithmes en Commande
LAAS - Laboratoire d'analyse et d'architecture des systèmes [Toulouse]
4 NON-A - Non-Asymptotic estimation for online systems
CRIStAL - Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189, Inria Lille - Nord Europe
5 SyNeR - Systèmes Non Linéaires et à Retards
CRIStAL - Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189
Abstract : Anomaly detection has been an active open problem in the networks community for several years. In this brief, we aim at detecting such abnormal signals by control theory techniques. Several classes of sliding mode observers are proposed for a fluid flow model of the transmission control protocol (TCP)/internet protocol network. Comparative simulations via network simulator NS-2 show the enhancement brought by a higher order sliding mode observer. The efficiency of this observer opens the way toward observing traffics with real TCP flow characteristics. To achieve this end, trace replay techniques for TCP traffic traces are presented. Finally, experiments lead to successful anomaly estimation under real traffic conditions.
Document type :
Journal articles
Liste complète des métadonnées

Cited literature [25 references]  Display  Hide  Download

https://hal.archives-ouvertes.fr/hal-00734325
Contributor : Frédéric Gouaisbaut <>
Submitted on : Friday, September 21, 2012 - 2:29:51 PM
Last modification on : Friday, April 12, 2019 - 4:23:49 PM
Document(s) archivé(s) le : Saturday, December 22, 2012 - 3:37:16 AM

File

jrnl.pdf
Files produced by the author(s)

Identifiers

Citation

Sandy Rahme, Yann Labit, Frédéric Gouaisbaut, Thierry Floquet. Sliding Modes for Anomaly Observation in TCP Networks: From Theory to Practice. IEEE Transactions on Control Systems Technology, Institute of Electrical and Electronics Engineers, 2013, 21 (3), pp. 1031-1038. ⟨10.1109/TCST.2012.2198648⟩. ⟨hal-00734325⟩

Share

Metrics

Record views

542

Files downloads

506