Student or educator? Sign up with your school email and get 6 months of Pro free.
CoChat
Sign Up
Cited by 541

The DOI matches its Crossref record.

Anomaly detection in IP networks

Thottan, M., Chuanyi Ji·2003·IEEE Transactions on Signal Processing
DOI 10.1109/tsp.2003.814797
Open this paper in CoChat — free account

Abstract

Network anomaly detection is a vibrant research area. Researchers have approached this problem using various techniques such as artificial intelligence, machine learning, and state machine modeling. In this paper, we first review these anomaly detection methods and then describe in detail a statistical signal processing technique based on abrupt change detection. We show that this signal processing technique is effective at detecting several network anomalies. Case studies from real network data that demonstrate the power of the signal processing approach to network anomaly detection are presented. The application of signal processing techniques to this area is still in its infancy, and we believe that it has great potential to enhance the field, and thereby improve the reliability of IP networks.

Overview

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1109/tsp.2003.814797

Cites

Statistics

Verification

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Citations

Cites

No references could be resolved yet.

Research works printed but not linked: 46

  1. 10.1109/90.282603 · DOI · Paper page
  2. Vehel, 1997, Fractals in Engineering: From Theory to Industrial Applications, 185, 10.1007/978-1-4471-0995-2_15 · doi:10.1007/978-1-4471-0995-2_15
  3. 10.1109/INFCOM.2001.916283 · doi:10.1109/infcom.2001.916283
  4. 10.1109/79.998081 · DOI · Paper page
  5. Thottan, 2000, Fault detection in ip networks
  6. Wang, Detecting syn flooding attacks
  7. 10.1109/NOMS.2000.830411 · doi:10.1109/noms.2000.830411
  8. Basseville, 1993, Detection of Abrupt Changes, Theory and Application
  9. Ye, Network management and control using collaborative on-line simulation, 10.1109/ICC.2001.936304 · doi:10.1109/icc.2001.936304
  10. 10.1007/BF01158964 · DOI
  11. 10.1109/18.761337 · DOI · Paper page
  12. 10.1109/18.761336 · doi:10.1109/18.761336
  13. Thottan, 2000, Using network fault predictions to enable ip traffic management, J. Network Syst. Manage.
  14. 10.1109/24.58721 · DOI
  15. 10.1109/CSAC.1998.738566 · doi:10.1109/csac.1998.738566
  16. 10.1007/978-0-387-35515-3_18 · doi:10.1007/978-0-387-35515-3_18
  17. 10.1145/347057.347560 · DOI · Paper page
  18. Cooperative association for internet data analysis
  19. 10.1145/345063.339413 · doi:10.1145/345063.339413
  20. 10.1109/35.841839 · doi:10.1109/35.841839
  21. 10.1109/65.826370 · doi:10.1109/65.826370
  22. Stallings, 1994, SNMP, SNMPv2, and CMIP The Practical Guide to Network Management Standards
  23. McCloghrie, 1991, Management information base for network management of tcp/ip-based internets: Mib 2
  24. Rose, 1996, The Simple Book: An Introduction to Internet Management
  25. 10.1109/ICC.1996.533672 · doi:10.1109/icc.1996.533672
  26. 10.1109/INFCOM.1993.253408 · doi:10.1109/infcom.1993.253408
  27. Franceschi, Performance evaluation for proactive network management, 22
  28. 10.1109/65.244793 · doi:10.1109/65.244793
  29. 10.1109/90.477721 · DOI
  30. 10.1109/INFCOM.1995.515921 · DOI
  31. Bouloutas, 1990, On the design of observers for failure detection of discrete event systems
  32. 10.1109/ICCS.1992.255112 · doi:10.1109/iccs.1992.255112
  33. 10.1109/65.244794 · DOI
  34. 10.1145/167954.166264 · doi:10.1145/167954.166264
  35. 10.1109/ICC.2000.853095 · doi:10.1109/icc.2000.853095
  36. Trees, 1971, Detection, Estimation, and Modulation Theory, 1
  37. Cohen-Tannoudji, 1977, Quantum Mechanics, 1
  38. 10.1109/34.41390 · DOI · Paper page
  39. Thottan, Network fault classification using abnormality vectors
  40. 10.1109/65.730748 · doi:10.1109/65.730748
  41. Hood, Proactive network fault detection, 3, 1147, 10.1109/INFCOM.1997.631137 · DOI
  42. Hood, 1996, Intelligent detection for fault management for communication networks
  43. Mandjes, Load characterization, overload prediction and load anomaly detection for voice over ip traffic
  44. Li, Distributed network monitoring with bounded link utilizationin ip networks
  45. 10.1109/INFCOM.2002.1019257 · doi:10.1109/infcom.2002.1019257
  46. Wei, 1996, Computer communication network traffic: Modeling, analysis and tests

Cited by

See all 541

Metadata

Authors
Thottan, M., & Ji, C.
Venue
IEEE Transactions on Signal Processing
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Published
2003-08
Volume
51
Issue
8
Pages
2191-2204
ISSN
1053-587X (ISSN-L)
DOI
10.1109/tsp.2003.814797
OpenAlex
W2131389289
Cited by
541
References
0
FWCI
17.46
Type
journal article
Language
en
Open access
closed
Licence
ieeexplore.ieee.org/Xplorehelp/downloads/license-information/IEEE.html (vor)

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

How to cite

Cite CoChat for the checks on this page, and the paper for its own findings.

This page
CoChat. (2026). Citation check: Anomaly detection in IP networks. https://app.cochat.ai/papers/10.1109/tsp.2003.814797
The paper
Thottan, M., & Ji, C. (2003). Anomaly detection in IP networks. IEEE Transactions on Signal Processing. https://doi.org/10.1109/tsp.2003.814797

Data sources

Bibliographic data: Semantic Scholar, OpenAlex, Crossref.

Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).

Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.