Abstract
This paper proposes a high-order terminal sliding-mode observer used for the anomaly detection in TCP/IP networks. It can track the fluid-flow model representing the TCP/IP behaviors in a router level. A smooth control signal of the observer can be generated based on the high-order sliding-mode technique for estimation of the queue length dynamics in the router. The distributed anomaly in the TCP/IP network incurred by an abnormal behavior can be detected using the smooth control signal. The proposed scheme requires only the average queue length in a router for anomaly detection. The simulations are presented to verify the effectiveness of the proposed method.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Labit, Y., Gouaisbaut, F., Ariba, Y.: Network Anomaly Estimation for TCP/AQM netWorks Using an Observer. In: The Third International Workshop on Feedback Control Implementation and Design in Computing Systems and Network, Annapolis, USA, pp. 63–68 (2008)
Steinwart, I., Hush, D., Scovel, C.: A Classification Framework for Anomaly Detection. Journal of Machine Learning Research 6, 211–232 (2005)
Ryu, R., Rump, C., Qiao, C.: Advances in Active Queue Management (AQM) based TCP Congestion Control. Telecommuniaction Systems 4, 317–351 (2004)
Ariba, Y., Gouaisbaut, F., Rahme, S., Labit, Y.: Robust Control Tools for Traffic Monitoring in TCP networks. In: 18th IEEE International Conference on Control Applications, Saint Petersburg, Russia, pp. 525–530 (2009)
Hollot, C., Misra, V., Towsley, D., Gong, W.: On Designing Improved Controllers for AQM Routers Supporting TCP Flows. In: IEEE INFOCOM, Anchorage, AK, USA, vol. 3, pp. 1726–1734 (2001)
Hollot, C., Misra, V., Towsley, D., Gong, W.: Analysis and Design of Controllers for AQM Routers Supporting TCP Flows. IEEE Trans. Automatic Control 47(6), 945–959 (2002)
Ariba, Y., Gouaisbaut, F., Labit, Y.: Feedback Control for Router Management and TCP/IP Network Stability. IEEE Trans. Network and Service Management 6(4), 255–266 (2009)
Kind, A., Stoecklin, M.P., Dimitropoulos, X.: Histogram-based Traffic Anomaly Detection. IEEE Trans. Network and Service Management 6(2), 1–12 (2009)
Misra, V., Gong, W., Towsley, D.: Fluid-based Analysis of a Network of AQM Routers Supporting TCP Flows with an Application to RED. In: ACM/SIGCOMM, Stockholm, Sweden, vol. 30(4), pp. 151–160 (2000)
Firoiu, V., Borden, M.: A Study of Active Queue Management for Congestion Control. In: IEEE INFOCOM, Tel Aviv, Israel, vol. 3, pp. 1435–1444 (2000)
Hollot, C., Misra, V., Towsley, D., Gong, W.: A Control Theoretic Analysis of RED. In: IEEE INFOCOM, Anchorage, AK, USA, vol. 3, pp. 1510–1519 (2001)
Ariba, Y., Labit, Y., Gouaisbaut, F.: Network Anomaly Estimation for TCP/AQM Networks Using an Observer. In: 3rd ACM International Workshop on Feedback Control Implementation and Design in Computing Systems and Networks, Annapolis, USA, pp. 45–50 (2008)
Rahme, S., Labit, Y., Gouaisbaut, F.: Sliding Mode Observer for Anomaly Detection in TCP/AQM Networks. In: The Second Inter. Conf. on Communication Theory, Reliability, and Quality of Service, Colmar, France, pp. 113–118 (2009)
Rahme, S., Labit, Y., Gouaisbaut, F.: An Unknown Input Sliding Observer for Anomaly Detection in TCP/IP Networks. In: 2009 International Conference on Ultra Modern Telecommunications and Workshops, St. Petersburg, Russia, pp. 1–7 (2009)
Rahme, S., Labit, Y., Gouaisbaut, F., Floquet, T.: Second Order Sliding Mode Observer for Anomaly Detection in TCP Networks: From Theory to Practice. In: Proc. of 49th IEEE Conf. on Decision and Control, Atlanta, GA, pp. 5120–5125 (2010)
Feng, Y., Han, F., Yu, X., Tari, Z., Li, L., Hu, J.: Terminal Sliding Mode Observer for Anomaly Detection in TCP/IP Networks. In: 2011 International Conference on Computer Science and Network Technology (ICCSNT), Harbin, China, vol. 1, pp. 617–620 (2011)
Feng, Y., Yu, X., Man, Z.: Non-singular Adaptive Terminal Sliding Mode Control of Rigid Manipulators. Automatica 38(12), 2159–2167 (2002)
Feng, Y., Han, X., Wang, Y., Yu, X.: Second-order Terminal Sliding Mode Control of Uncertain Multivariable Systems. International Journal of Control 80(6), 856–862 (2007)
Feng, Y., Zheng, J., Yu, X., Truong, N.V.: Hybrid Terminal Sliding-mode Observer Design Method for a Permanent-magnet Synchronous Motor Control System. IEEE Trans. Industrial Electronics 56(9), 3424–3431 (2009)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Feng, Y., Han, F., Yu, X., Tari, Z., Li, L., Hu, J. (2012). High-Order Terminal Sliding-Mode Observers for Anomaly Detection. In: Huang, DS., Jiang, C., Bevilacqua, V., Figueroa, J.C. (eds) Intelligent Computing Technology. ICIC 2012. Lecture Notes in Computer Science, vol 7389. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-31588-6_64
Download citation
DOI: https://doi.org/10.1007/978-3-642-31588-6_64
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-31587-9
Online ISBN: 978-3-642-31588-6
eBook Packages: Computer ScienceComputer Science (R0)