@INPROCEEDINGS{7472465,
  author={J. {Frecon} and R. {Fontugne} and G. {Didier} and N. {Pustelnik} and K. {Fukuda} and P. {Abry}},
  booktitle={2016 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)}, 
  title={Non-linear regression for bivariate self-similarity identification — application to anomaly detection in Internet traffic based on a joint scaling analysis of packet and byte counts}, 
  year={2016},
  volume={},
  number={},
  pages={4184-4188},
  abstract={Internet traffic monitoring is a crucial task for network security. Self-similarity, a key property for a relevant description of internet traffic statistics, has already been massively and successfully involved in anomaly detection. Self-similar analysis was however so far applied either to byte or Packet count time series independently, while both signals are jointly collected and technically deeply related. The present contribution elaborates on a recently proposed multivariate self-similar model, Operator fractional Brownian Motion (OfBm), to analyze jointly self-similarity in bytes and packets. A non-linear regression procedure, based on an original Branch & Bound resolution procedure, is devised for the full identification of bivariate OfBm. The estimation performance is assessed by means of Monte Carlo simulations. Further, an Internet traffic anomaly detection procedure is proposed, that makes use of the vector of Hurst exponents underlying the OfBm based Internet data modeling. Applied to a large set of high quality and modern Internet data from the MAWI repository, proof-of-concept results in anomaly detection are detailed and discussed.},
  keywords={Brownian motion;computer network security;Internet;Monte Carlo methods;regression analysis;telecommunication traffic;time series;nonlinear regression procedure;bivariate self-similarity identification;anomaly detection;Internet traffic monitoring;joint scaling analysis;byte count time series;packet count time series;network security;Internet traffic statistics;multivariate self-similar model;operator fractional Brownian motion;OfBm;branch-&-bound resolution procedure;bivariate OfBm identification;Monte Carlo simulations;Hurst exponents;OfBm based Internet data modeling;MAWI repository;Internet;Estimation;IP networks;Time series analysis;Linear regression;Monitoring;Brownian motion;Internet traffic;anomaly detection;bivariate self-similarity;non linear regression;branch and bound},
  doi={10.1109/ICASSP.2016.7472465},
  ISSN={2379-190X},
  month={March},}