{'fraction_non_alphanumeric': 0.0158311345646438, 'fraction_numerical': 0.0, 'mean_word_length': 5.432203389830509, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Real network traffic anomaly detection based on Analytical Discrete Wavelet Transform

Signal processing techniques have attracted a lot of attention recently in the networking security technology, because of their capability of detecting novel intrusions or attacks. In this paper, we propose a new detection mechanism of network traffic anomaly based on Analytical Discrete Wavelet Transform (ADWT) and high-order statistical analysis. In order to describe the network traffic information, we use a set of features based on different metrics. We evaluate our technique with real traffic dataset, collected over several days period on a university public server. The test results show that the proposed approach accurately detects a wide range of anomalies.