An Evaluation of Trading Bands as Indicators for Network Telescope Datasets

Cowie, Bradley; Irwin, Barry V W

Title: An Evaluation of Trading Bands as Indicators for Network Telescope Datasets
Creator: Cowie, Bradley
Creator: Irwin, Barry V W
Date Issued: 2011
Date: 2011
Type: text
Type: article
Identifier: http://hdl.handle.net/10962/428013
Identifier: vital:72480
Identifier: https://www.researchgate.net/profile/Barry-Ir-win/publication/326225071_An_Evaluation_of_Trading_Bands_as_Indicators_for_Network_Telescope_Datasets/links/5b3f231a4585150d2309e1c0/An-Evaluation-of-Trading-Bands-as-Indicators-for-Network-Telescope-Datasets.pdf
Description: Large scale viral outbreaks such as Conficker, the Code Red worm and the Witty worm illustrate the importance of monitoring malevolent activity on the Internet. Careful monitoring of anomalous traffic allows organiza-tions to react appropriately and in a timely fashion to minimize economic damage. Network telescopes, a type of Internet monitor, provide ana-lysts with a way of decoupling anomalous traffic from legitimate traffic. Data from network telescopes is used by analysts to identify potential incidents by comparing recent trends with historical data. Analysis of network telescope datasets is complicated by the large quantity of data present, the number of subdivisions within the data and the uncertainty associated with received traffic. While there is considerable research being performed in the field of network telescopes little of this work is concerned with the analysis of alternative methods of incident identifi-cation. This paper considers trading bands, a subfield of technical analysis, as an approach to identifying potential Internet incidents such as worms. Trading bands construct boundaries that are used for meas-uring when certain quantities are high or low relative to recent values. This paper considers Bollinger Bands and associated Bollinger Indica-tors, Price Channels and Keltner Channels. These techniques are evaluated as indicators of malevolent activity by considering how these techniques react to incidents indentified in the captured data from a network telescope.
Format: 5 pages
Format: pdf
Language: English
Relation: Proceedings of Southern African Telecommunication Networks and Applications Conference (SATNAC)
Relation: Cowie, B. and Irwin, B., 2011. An Evaluation of Trading Bands as Indicators for Network Telescope Datasets. Proceedings of the Southern Africa Telecommunication Networks and Applications Conference (SATNAC)
Relation: Proceedings of Southern African Telecommunication Networks and Applications Conference (SATNAC) volume 2011 number 1 1 5 2011 Conference
Rights: Publisher
Rights: Use of this resource is governed by the terms and conditions of the Southern Africa Telecommunication Networks and Applications Conference (SA TNAC) Statement (https://www.satnac.org.za/)

Hits: 54
Visitors: 58
Downloads: 6

Collections

Irwin, Barry V W (Prof)

RU Department of Computer Science

SDG 09. Industry, Innovation and Infrastructure

		Thumbnail	File	Description	Size	Format
View Details Download			SOURCE1	An Evaluation of Trading Bands as Indicators for Network Telescope Datasets.pdf	610 KB	Adobe Acrobat PDF	View Details Download