Characterising dependency in computer networks using spectral coherence
File(s)coherence_ITISE.pdf (452.8 KB)
Published version
Author(s)
Gibberd, Alexander
Nobel, Jordan
Cohen, E
Type
Conference Paper
Abstract
The quantification of normal and anomalous traffic flows
across computer networks is a topic of pervasive interest in network se-
curity, and requires the timely application of time-series methods. The
transmission or reception of packets passing between computers can be
represented in terms of time-stamped events and the resulting activity
understood in terms of point-processes. Interestingly, in the disparate do-
main of neuroscience, models for describing dependent point-processes
are well developed. In particular, spectral methods which decompose
second-order dependency across different frequencies allow for a rich
characterisation of point-processes. In this paper, we investigate using
the spectral coherence statistic to characterise computer network activ-
ity, and determine if, and how, device messaging may be dependent. We
demonstrate on real data, that for many devices there appears to be very
little dependency between device messaging channels. However, when sig-
nificant coherence is detected it appears highly structured, a result which
suggests coherence may prove useful for discriminating between types of
activity at the network level.
across computer networks is a topic of pervasive interest in network se-
curity, and requires the timely application of time-series methods. The
transmission or reception of packets passing between computers can be
represented in terms of time-stamped events and the resulting activity
understood in terms of point-processes. Interestingly, in the disparate do-
main of neuroscience, models for describing dependent point-processes
are well developed. In particular, spectral methods which decompose
second-order dependency across different frequencies allow for a rich
characterisation of point-processes. In this paper, we investigate using
the spectral coherence statistic to characterise computer network activ-
ity, and determine if, and how, device messaging may be dependent. We
demonstrate on real data, that for many devices there appears to be very
little dependency between device messaging channels. However, when sig-
nificant coherence is detected it appears highly structured, a result which
suggests coherence may prove useful for discriminating between types of
activity at the network level.
Date Issued
2018-09-19
Date Acceptance
2018-07-16
Citation
Proceedings of the International Conference on Time Series and Forecasting, 2018
ISBN
9788417293574
Publisher
ITISE
Journal / Book Title
Proceedings of the International Conference on Time Series and Forecasting
Copyright Statement
© 2018 The Author(s). All rights reserved.
Sponsor
Engineering & Physical Science Research Council (EPSRC)
Grant Number
EP/P011535/1
Source
International Conference on Time Series and Forecasting
Publication Status
Published
Start Date
2018-09-19
Finish Date
2018-09-21
Coverage Spatial
Granada, Spain
Date Publish Online
2018-09-19