Award Abstract #0347252
CAREER: A Multiresolution Approach to Network Anomaly and Intrusion Detection

NSF Org:	CNS Division of Computer and Network Systems
Initial Amendment Date:	April 7, 2004
Latest Amendment Date:	April 7, 2004
Award Number:	0347252
Award Instrument:	Standard Grant
Program Manager:	Karl N. Levitt CNS Division of Computer and Network Systems CSE Directorate for Computer & Information Science & Engineering
Start Date:	April 1, 2004
Expires:	March 31, 2009 (Estimated)
Awarded Amount to Date:	$501901
Investigator(s):	Paul Barford pb@cs.wisc.edu (Principal Investigator)
Sponsor:	University of Wisconsin-Madison 21 North Park Street MADISON, WI 53715 608/262-3822
NSF Program(s):	ADVANCED NET INFRA & RSCH
Field Application(s):	0000912 Computer Science
Program Reference Code(s):	HPCC,9216,7254,4097,2802,1667,1187,1045
Program Element Code(s):	4090

ABSTRACT

CNS-0347252



CAREER: A Multiresolution Approach to Network Anomaly and Intrusion Detection

Paul Barford

This project aims to measure traffic and detect anomalies and intrusions in wide area networks. The measurements will support precise, real-time identification of anomalies/intrusions, enabling future networks to function securely and efficiently--something that is seriously threatened in today's hostile and dynamic environment. New, in-situ measurement systems will be built and deployed to collect traffic data from many locations across the Internet and store it in a centralized repository in an anonymized, privacy preserving format. Research access to the data will be provided through a private, secure web interface. In conjunction with the measurement and data collection activity, the research will develop multiresolution analysis methods based on wavelets, which isolate distinct traffic characteristics in both frequency and time, thus enabling accurate and timely detection of anomalies/intrusions. A library of measurement/analysis tools and the data repository will be made available to the research community. This project will also develop a series of laboratory experiments to provide secondary and university students a hand-on means of learning about the Internet. This effort involves collaboration on both the measurement and analysis activities with network operators, researchers in industry and researchers in disciplines outside of networking including applied math, statistics and signal processing.

PUBLICATIONS PRODUCED AS A RESULT OF THIS RESEARCH

(Showing: 1 - 2 of 2).

Joel Sommers, Paul Barford, Nick Duffield, Amos Ron.  "A Geometric Approach to Improving Active Packet Loss Measurement,"  IEEE/ACM Transactions on Networking,  v.16,  2008, 

Joel Sommers, Paul Barford, Walter Willinger.  "Laboratory-based Calibration of Available Bandwidth Estimation Tools,"  Elsevier Microprocessors and Microsystems Journal,  v.31,  2007,  p. 222.


(Showing: 1 - 2 of 2).

Please report errors in award information by writing to: awardsearch@nsf.gov.