Investigation of graph edit distance cost functions for detection of network anomalies

Kelly Marie Kapsabelis, Peter John Dickinson, Kutluyil Dogancay
2007 ANZIAM Journal  
Computer networks are becoming ubiquitous. Accurately monitoring and managing the behaviour of these complex and dynamic networks is a challenging task. It has become crucial to develop and employ good network monitoring techniques that assist in identifying and correcting abnormalities that affect network reliability, performance, security and future planning. There has been significant research in the detection of change and anomalous events in computer networks. A recent novel approach
more » ... ents the logical communications of a periodically observed network as a time series of graphs and applies the graph matching technique, graph edit distance, to monitor and detect anomalous behaviour in the network. To date, only simple cost functions for graph edit operations have been used in application to computer network monitoring. This article investigates simple See
doi:10.21914/anziamj.v48i0.47 fatcat:i4iwqlzknra5nohunjp6gxf2ze