{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,26]],"date-time":"2025-09-26T00:09:52Z","timestamp":1758845392491},"reference-count":7,"publisher":"World Scientific Pub Co Pte Lt","issue":"04","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J. Inter. Net."],"published-print":{"date-parts":[[2009,12]]},"abstract":"<jats:p> Anomaly detection is becoming a powerful and necessary component as wireless networks gain popularity. In this paper, we evaluate the efficacy of PCA based anomaly detection for wireless mesh networks (WMN). PCA based method [1] was originally developed for wired networks. Our experiments show that it is possible to detect different types of anomalies, such as Denial-of-service (DoS) attack, port scan attack [1], etc., in an interference prone wireless environment. However, the PCA based method is found to be very sensitive to small changes in flows causing non-negligible number of false alarms. This problem prompted us to develop an anomaly identification scheme which automatically identifies the flow(s) causing the detected anomaly and their contributions in terms of number of packets. Our results show that the identification scheme is able to differentiate false alarms from real anomalies and pinpoint the culprit(s) in case of a real fault or threat. Moreover, we also found that the threshold value used in [1] for distinguishing normal and abnormal traffic conditions is based on assumption of normally distributed traffic which is not accurate for current network traffic which is mostly self-similar in nature. Adjusting the threshold also reduced the number of false alarms considerably. The experiments were performed over an 8 node mesh testbed deployed in a suburban area, under different realistic traffic scenarios. Our identification scheme facilitates the use of PCA based method for real-time anomaly detection in wireless networks as it can filter the false alarms locally at the monitoring nodes without excessive computational overhead. <\/jats:p>","DOI":"10.1142\/s0219265909002698","type":"journal-article","created":{"date-parts":[[2010,3,23]],"date-time":"2010-03-23T11:16:52Z","timestamp":1269343012000},"page":"517-534","source":"Crossref","is-referenced-by-count":4,"title":["DETECTION AND IDENTIFICATION OF ANOMALIES IN WIRELESS MESH NETWORKS USING PRINCIPAL COMPONENT ANALYSIS (PCA)"],"prefix":"10.1142","volume":"10","author":[{"given":"ZAINAB R.","family":"ZAIDI","sequence":"first","affiliation":[{"name":"Network Systems, NICTA, Locked Bag 9013, Alexandria, NSW 1435, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"SARA","family":"HAKAMI","sequence":"additional","affiliation":[{"name":"School of EE&amp;T, University of NSW, Sydney, NSW 2052, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"TIM","family":"MOORS","sequence":"additional","affiliation":[{"name":"School of EE&amp;T, University of NSW, Sydney, NSW 2052, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"BJORN","family":"LANDFELDT","sequence":"additional","affiliation":[{"name":"School of IT, University of Sydney, Sydney, NSW 2006, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"219","published-online":{"date-parts":[[2012,4,30]]},"reference":[{"key":"rf6","volume":"13","author":"Zaidi Z. R.","journal-title":"ACM\/Springer MONET"},{"key":"rf9","volume-title":"Handbook on Adhoc and Mobile Computing","author":"Zaidi Z. R.","year":"2007"},{"key":"rf10","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2005.853419"},{"key":"rf13","volume-title":"Security in Wireless Mesh Networks","author":"Chen T.","year":"2007"},{"key":"rf14","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2006.1632480"},{"key":"rf15","doi-asserted-by":"publisher","DOI":"10.1145\/1163593.1163597"},{"key":"rf25","doi-asserted-by":"publisher","DOI":"10.1201\/9781420035094"}],"container-title":["Journal of Interconnection Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.worldscientific.com\/doi\/pdf\/10.1142\/S0219265909002698","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,7]],"date-time":"2019-08-07T15:52:13Z","timestamp":1565193133000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.worldscientific.com\/doi\/abs\/10.1142\/S0219265909002698"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,12]]},"references-count":7,"journal-issue":{"issue":"04","published-online":{"date-parts":[[2012,4,30]]},"published-print":{"date-parts":[[2009,12]]}},"alternative-id":["10.1142\/S0219265909002698"],"URL":"https:\/\/doi.org\/10.1142\/s0219265909002698","relation":{},"ISSN":["0219-2659","1793-6713"],"issn-type":[{"value":"0219-2659","type":"print"},{"value":"1793-6713","type":"electronic"}],"subject":[],"published":{"date-parts":[[2009,12]]}}}