{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,4,23]],"date-time":"2022-04-23T18:24:39Z","timestamp":1650738279649},"reference-count":54,"publisher":"Springer Science and Business Media LLC","issue":"11-12","license":[{"start":{"date-parts":[[2007,11,1]],"date-time":"2007-11-01T00:00:00Z","timestamp":1193875200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2007,11,1]],"date-time":"2007-11-01T00:00:00Z","timestamp":1193875200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Ann. Telecommun."],"published-print":{"date-parts":[[2007,11]]},"DOI":"10.1007\/bf03253326","type":"journal-article","created":{"date-parts":[[2021,7,7]],"date-time":"2021-07-07T06:33:22Z","timestamp":1625639602000},"page":"1401-1428","source":"Crossref","is-referenced-by-count":2,"title":["Une caract\u00e9risation non gaussienne et \u00e0 longue m\u00e9moire du trafic Internet et de ses anomalies: validation exp\u00e9rimentale et application \u00e0 la d\u00e9tection d\u2019attaque de DDoS\/Non Gaussian Long Memory Model for Internet Traffic: Experimental Validation and Application to DDoS Detection"],"prefix":"10.1007","volume":"62","author":[{"given":"Pierre","family":"Borgnat","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Patrice","family":"Abry","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guillaume","family":"Dewaele","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Antoine","family":"Scherrer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicolas","family":"Larrieu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Philippe","family":"Owezarski","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yann","family":"Labit","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Laurent","family":"Gallon","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Julien","family":"Aussibal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"BF03253326_CR1","volume-title":"EEE-CS","author":"P. Abry","year":"2007","unstructured":"Abry P., Borgnat P., Dewaele G., Sketch based anomaly detection, identification and performance evaluation. In Workshop on Internet Measurement Technology and its Applications to Building Next Generation Internet, in EEE-CS & IPSJ saint 2007), January 2007."},{"issue":"1","key":"BF03253326_CR2","first-page":"2","volume":"44","author":"P. Abry","year":"1998","unstructured":"Abry P., Veitch D., Wavelet analysis of long-range dependent traffic. IEEE Trans. on Info. Theory, 441): 2\u201315, January 1998.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR3","unstructured":"Tfn2k An analysis, http:\/\/packetstormsecurity.org\/distributed\/TFN2kAnalysis-1.3.txt."},{"issue":"16","key":"BF03253326_CR4","first-page":"719","volume":"5","author":"A. Andersen","year":"1998","unstructured":"Andersen A., Nielsen B., A Markovian approach for modelling packet traffic with long range dependence, IEEE journal on Selected Areas in Communications, 516):719\u2013732, 1998.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR5","unstructured":"Iperf The tcp\/udp bandwith Measurement Tool. http:\/\/dast.nlanr.net\/Projects\/Iperf\/."},{"key":"BF03253326_CR6","first-page":"35","volume-title":"ACM\/SIGCOMM Internet MeasurementWorkshop","author":"C. Barakat","year":"2002","unstructured":"Barakat C., Thiran P., Iannaccone G., Diot C., Owezarski P., A flowbased model for Internet backbone traffic. In ACM\/SIGCOMM Internet MeasurementWorkshop, pages 35\u201347, New York, NY, USA, ACM Press 2002."},{"key":"BF03253326_CR7","first-page":"71","volume-title":"In ACM\/SIGCOMM","author":"P. Barford","year":"2002","unstructured":"Barford P., Kline J., Plonka D., Ron A., A signal analysis of network traffic anomalies. In ACM\/SIGCOMM Internet Measurement Workshop, pages 71\u201382, Marseille, France, November 2002."},{"key":"BF03253326_CR8","first-page":"349","volume":"18","author":"M. Basseville","year":"1989","unstructured":"Basseville M., Distance measures for signal processing and pattern recognition. Signal Processing, 18:349\u2013369, 1989.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR9","volume-title":"Statistics for Long-memory processes","author":"J. Beran","year":"1994","unstructured":"Beran J., Statistics for Long-memory processes. Chapman & Hall, New York, 1994."},{"key":"BF03253326_CR10","first-page":"323","volume-title":"Colloque GRETSI-2005","author":"P. Borgnat","year":"2005","unstructured":"Borgnat P., Larrieu N., Abry P., Owezarski P., D\u00e9tection d\u2019attaques de \u201ed\u00e9ni de services\u201d: ruptures dans les statistiques du trafic. In Colloque GRETSI-2005, pages 323\u2013326, Louvain-la-Neuve, Belgique, September 2005."},{"key":"BF03253326_CR11","first-page":"303","volume-title":"In Conf. Francophone d\u2019Ing\u00e9nieurie des Protocoles, CFIP-2006","author":"P. Borgnat","year":"2006","unstructured":"Borgnat P., Larrieu N., Owezarski P., Abry P., Aussibal J., Gallon L., Dewaele G., Boudaoud K., Bernaille L., Scherrer A., Zhang Y., Labit Y., D\u00e9tection d\u2019attaques de d\u00e9nis de service par un mod\u00e8le non gaussien multir\u00e9solution. In Conf. Francophone d\u2019Ing\u00e9nieurie des Protocoles, CFIP-2006, pages 303\u2013314, November 2006."},{"key":"BF03253326_CR12","first-page":"139","volume-title":"In USENIX System Administration Conference","author":"J. Brutlag","year":"2000","unstructured":"Brutlag J., Aberrant behavior detection in time series for network monitoring. In USENIX System Administration Conference, pages 139\u2013146, New Orleans, December 2000."},{"key":"BF03253326_CR13","first-page":"2143","volume-title":"In IEEE Globecom","author":"C.-M. Cheng","year":"2002","unstructured":"Cheng C-M., Kung H.T., Tan K-S., Use of spectral analysis in defense against DoS attacks. In IEEE Globecom, volume 3, pages 2143\u20132148, Taipei, Taiwan, 2002."},{"key":"BF03253326_CR14","first-page":"1","volume-title":"In Passive and Active Measurements","author":"J. Cleary","year":"2000","unstructured":"Cleary J., Donnelly S., Graham I., McGregor A., Pearson M., Design principles for accurate passive measurement. In Passive and Active Measurements, pages 1\u20137, Hamilton, New Zealand, apr 2000."},{"key":"BF03253326_CR15","volume-title":"Birkh\u00e4user","author":"P. Doukhan","year":"2003","unstructured":"Doukhan P., Oppenheim G., Taqqu M. S., Long-Range Dependence: Theory and Applications. Birkh\u00e4user, Boston, 2003."},{"issue":"2","key":"BF03253326_CR16","first-page":"209","volume":"4","author":"A. Erramilli","year":"1996","unstructured":"Erramilli A., Narayan O., Willinger W., Experimental queueing analysis with long-range dependent packet traffic, ACM\/IEEE transactions on Networking, 42):209\u2013223, 1996.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR17","volume-title":"Wiley","author":"M. Evans","year":"2000","unstructured":"Evans M., Hastings N., Peacock B., Statistical Distributions. Wiley (Interscience Division), June 2000."},{"key":"BF03253326_CR18","first-page":"297","volume-title":"SAR\u20192005","author":"S. Farraposo","year":"2005","unstructured":"Farraposo S., Boudaoud K., Gallon L., Owezarski P., Some issues raised by DoS attacks and the TCP\/IP suite. In SAR\u20192005, pages 297\u2013306, Batz-sur-mer, France, June 2005."},{"key":"BF03253326_CR19","first-page":"42","volume-title":"In ACM\/SIGCOMM conference on Applications, technologies, architectures, and protocols for computer communication","author":"A. Feldmann","year":"1998","unstructured":"Feldmann A., Gilbert A.C., Willinger W., Data networks as cascades: Investigating the multifractal nature of Internet WAN traffic. In ACM\/SIGCOMM conference on Applications, technologies, architectures, and protocols for computer communication, pages 42\u201355, 1998."},{"key":"BF03253326_CR20","first-page":"15","volume-title":"ACM SIGCOMM","author":"M. Grossglauser","year":"1996","unstructured":"Grossglauser M., Bolot J., On the relevance of long-range dependence in network traffic. In ACM SIGCOMM, pages 15\u201324, 1996."},{"key":"BF03253326_CR21","first-page":"88","volume-title":"Statistical Models in Engineering","author":"G. J. Hahn","year":"1994","unstructured":"Hahn G. J., Shapiro S. S., Statistical Models in Engineering, page 88. Wiley (Interscience Division), June 1994."},{"key":"BF03253326_CR22","unstructured":"HPING2. http:\/\/sourceforge.net\/projects\/hping2."},{"key":"BF03253326_CR23","first-page":"114","volume-title":"ACM SIGCOMM","author":"C. Huang","year":"1995","unstructured":"Huang C., Devetsikiotis M., Lambadaris I., Kaye A., Modeling and simulation of self-similar Variable Bit Rate compressed video: a unified approach. In ACM SIGCOMM, pages 114\u2013125, Cambridge, UK, August 1995."},{"key":"BF03253326_CR24","first-page":"99","volume-title":"SIGCOMM","author":"A. Hussain","year":"2003","unstructured":"Hussain A., Heidemann J., Papadopoulos C., A framework for classifying denial of service attacks. In SIGCOMM, pages 99\u2013110, Karlsruhe, Germany, August 2003."},{"key":"BF03253326_CR25","first-page":"1882","volume-title":"In IEEE International Conference on Communications","author":"S. Jin","year":"2004","unstructured":"Jin S., Yeung D., A covariance analysis model for DDOS attack detection. In IEEE International Conference on Communications, volume 4, pages 1882\u20131886, Paris, France, June 2004."},{"key":"BF03253326_CR26","first-page":"293","volume-title":"In International www Conference","author":"J. Jung","year":"2002","unstructured":"Jung J., Krishnamurthy B., Rabinovich M., Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNS and Web Sites. In International www Conference, pages 293\u2013304, Honolulu, HI, May 2002."},{"key":"BF03253326_CR27","volume-title":"USENIX\u2019NSDI\u201905","author":"S. Kandula","year":"2005","unstructured":"Kandula S., Katabi D., Jacob M., Berger A., Botz-4-sale: survicing organized DDOS attacks that mimic Flash Crowds. In Vahdat A. and Wetherall D., editors, USENIX\u2019NSDI\u201905, Boston, MA, May 2"},{"key":"BF03253326_CR28","first-page":"1558","volume-title":"In INFOCOM","author":"T. Karagiannis","year":"2004","unstructured":"Karagiannis T., Molle M., Faloutsos M., Broido A., A nonstationary Poisson view of the Internet traffic. In INFOCOM, volume 3, pages 1558\u20131569, 2004."},{"key":"BF03253326_CR29","first-page":"234","volume-title":"In ACM IMC","author":"B. Krishnamurty","year":"2003","unstructured":"Krishnamurty B., Sen S., Zhang Y., Chen Y., Sketch-based change detection: Methods, evaluation, and applications. In ACM IMC, pages 234\u2013247, October 2003."},{"key":"BF03253326_CR30","unstructured":"Laasnetexp.fr. http:\/\/www.laas.fr\/owe\/laasnetexp.fr\/laasnetexp.fr.htm."},{"key":"BF03253326_CR31","doi-asserted-by":"publisher","first-page":"219","DOI":"10.1145\/1015467.1015492","volume-title":"SIGCOMM","author":"A. Lakhina","year":"2004","unstructured":"Lakhina A., Crovella M., Diot C., Diagnosing network-wide traffic anomalies. In SIGCOMM, pages 219\u2013230, August 2004."},{"issue":"1","key":"BF03253326_CR32","first-page":"1","volume":"2","author":"W.E. Leland","year":"1994","unstructured":"Leland W.E., Taqqu M.S., Willinger W., Wilson D.V., On the self-similar nature of ethernet traffic (extended version), ACM\/IEEE transactions on Networking, 21): 1\u201315, February 1994.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR33","first-page":"421","volume-title":"In International Conference on computer communications and networks","author":"L. Li","year":"2003","unstructured":"Li L., Lee G., ddos attack detection and wavelets. In International Conference on computer communications and networks, pages 421\u2013427, August 2003."},{"key":"BF03253326_CR34","volume-title":"System identification: theory for the user","author":"L. Ljung","year":"1999","unstructured":"Ljung L., System identification: theory for the user, chapter 10.2. PTR Prentice Hall, 1999."},{"key":"BF03253326_CR35","first-page":"359","volume-title":"In Performance\/SIGMETRICS Tutorials","author":"B. Melamed","year":"1993","unstructured":"Melamed B., An overview of TES processes and modeling methodology. In Performance\/SIGMETRICS Tutorials, pages 359\u2013393, 1993."},{"key":"BF03253326_CR36","first-page":"9","volume-title":"In Usenix Security Symposium","author":"D. Moore","year":"2001","unstructured":"Moore D., Voelker G.M., Savage S., Inferring Internet denial-of-service activity. In Usenix Security Symposium, pages 9\u201322, 2001."},{"issue":"6","key":"BF03253326_CR37","first-page":"953","volume":"13","author":"I. Norros","year":"1995","unstructured":"Norros I. On the use of fractional Brownian motion in the theory of connectionless networks, IEEE journal on Selected Areas in Communications, 136):953\u2013962, 1995.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"issue":"3\u20134","key":"BF03253326_CR38","doi-asserted-by":"crossref","first-page":"369","DOI":"10.1007\/BF03253266","volume":"62","author":"P. Owezarski","year":"2007","unstructured":"Owezarski P., Larrieu N., Bernaille L., Saddi W., Guillemin F., Soule A., Salamatian K., Distribution of traffic among applications as measured in the french Metropolis project. Annals of Telecommunications, vol. 62, No 3\u20134, March-April, pp. 369\u2013386, 2007.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR39","first-page":"171","volume-title":"In International Conference on Network Protocols","author":"K. Park","year":"1996","unstructured":"Park K., Kim G., Crovella M., On the relationship between file sizes, transport protocols, and self-similar network traffic. In International Conference on Network Protocols, pages 171\u2013180, Washington, DC, USA, IEEE Computer Society, 1996."},{"key":"BF03253326_CR40","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1002\/047120644X.ch1","volume-title":"Self-Similar Network Traffic and Performance Evaluation","author":"K. Park","year":"2000","unstructured":"Park K., Willinger W., Self-similar network traffic: An overview. In Park K. and Willinger W., editors, Self-Similar Network Traffic and Performance Evaluation, pages 1\u201338. Wiley (Interscience Division), 2000."},{"issue":"3","key":"BF03253326_CR41","first-page":"226","volume":"3","author":"V. Paxon","year":"1995","unstructured":"Paxon V., Floyd S., Wide-area traffic: The failure of Poisson modeling, ACM\/IEEE transactions on Networking, 33):226\u2013244, June 1995.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"issue":"23\u201324","key":"BF03253326_CR42","first-page":"2435","volume":"31","author":"V. Paxson","year":"1999","unstructured":"Paxson V., Bro: a system for detecting network intruders in real-time. Computer Networks Journal, 3123\u201324):2435\u20132463, 1999.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR43","unstructured":"Metrosec project. http:\/\/www.laas.fr\/metrosec."},{"key":"BF03253326_CR44","unstructured":"QOSMOS Traffic Designer. http:\/\/www.qosmos.net."},{"key":"BF03253326_CR45","volume-title":"In Colloque GRETSI-2005","author":"A. Scherrer","year":"2005","unstructured":"Scherrer A., Abry P., Marginales non gaussiennes et longue m\u00e9moire: analyse et synth\u00e8se de trafic Internet. In Colloque GRETSI-2005, Louvain-la-Neuve, Belgique, September 2005."},{"key":"BF03253326_CR46","volume-title":"IEEE Transaction on Dependable and Secure Computing","author":"A. Scherrer","year":"2007","unstructured":"Scherrer A., Larrieu N., Owezarski P., Borgnat P., Abry P., Non-gaussian and long memory statistical characterisations for Internet traffic with anomalies, IEEE Transaction on Dependable and Secure Computing, 41), January 2007."},{"issue":"1","key":"BF03253326_CR47","first-page":"63","volume":"5","author":"M. Taqqu","year":"1997","unstructured":"Taqqu M., Teverosky V., Willinger W., Is network traffic self-similar or multifractal? Fractals, 51):63\u201373, 1997.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR48","unstructured":"The DoS Project\u2019s \u201ctrinoo\u201d distributed denial of service attack tool. http:\/\/staff.washington.edu\/dittrich\/misc\/trinoo.analysis."},{"key":"BF03253326_CR49","doi-asserted-by":"publisher","first-page":"280","DOI":"10.1109\/SECPRI.1989.36302","volume-title":"In IEEE Symposium on Security and Privacy","author":"H.S. Vaccaro","year":"1989","unstructured":"Vaccaro H.S., Liepins G.E., Detection of anomalous computer session activity. In IEEE Symposium on Security and Privacy, pages 280\u2013289, Oakland, California, May 1989."},{"issue":"3","key":"BF03253326_CR50","first-page":"878","volume":"45","author":"D. Veitch","year":"1999","unstructured":"Veitch D., Abry P., A wavelet based joint estimator of the parameters of long-range dependence, IEEE Trans, on Info. Theory, Special issue on \u201cMultiscale Statistical Signal Analysis and its Applications\u201d, 453):878\u2013897, April 1999.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"issue":"10","key":"BF03253326_CR51","first-page":"2325","volume":"49","author":"D. Veitch","year":"2001","unstructured":"Veitch D., Abry P., A statistical test for the time constancy of scaling exponents, IEEE Transactions on Signal Processing, 4910):2325\u20132334, October 2001.","journal-title":"Annales Des T\u00e9l\u00e9communications"},{"key":"BF03253326_CR52","first-page":"171","volume-title":"In Workshop on Information Assurance and Security","author":"N. Ye","year":"2000","unstructured":"Ye N., A Markov chain model of temporal behavior for anomaly detection. In Workshop on Information Assurance and Security, pages 171\u2013184, West Point, NY, June 2000."},{"key":"BF03253326_CR53","volume-title":"DDOS attack detection and wavelets","author":"J. Yuan","year":"2004","unstructured":"Yuan J., Mills K., DDOS attack detection and wavelets. Technical report, National Institute of Standards and Technology, 2004."},{"key":"BF03253326_CR54","first-page":"1826","volume":"3","author":"Z. Zhang","year":"2003","unstructured":"Zhang Z., Ribeiro V., Moon S., Diot C., Small time scaling behavior of Internet backbone traffic: an empirical study, INFOCOM, 3:1826\u20131836, March 2003.","journal-title":"Annales Des T\u00e9l\u00e9communications"}],"container-title":["Annales Des T\u00e9l\u00e9communications"],"original-title":[],"language":"fr","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/BF03253326.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/BF03253326\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/BF03253326.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,7,7]],"date-time":"2021-07-07T07:40:28Z","timestamp":1625643628000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/BF03253326"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,11]]},"references-count":54,"journal-issue":{"issue":"11-12","published-print":{"date-parts":[[2007,11]]}},"alternative-id":["BF03253326"],"URL":"https:\/\/doi.org\/10.1007\/bf03253326","relation":{},"ISSN":["0003-4347","1958-9395"],"issn-type":[{"value":"0003-4347","type":"print"},{"value":"1958-9395","type":"electronic"}],"subject":[],"published":{"date-parts":[[2007,11]]}}}