Performance Analysis of Network Anomaly Detection Systems in Consumer Networks

Abstract

There has been a significant increase in the amount of smart home appliances such as intelligent thermostats, Internet-connected baby monitors, lights being used; these devices have been a target for a number of cyber-attacks till date. Using only fundamental network information such as source and destination ports, packet sizes, TCP flags, time between subsequent packets, necessary features can be extracted to detect the aforementioned anomalies. This paper aims to analyze some critical operating system performance metrics on detecting such anomalies. It also consists of the taxonomy of various approaches to classify anomalies and detailed description on capturing and cleaning network packets.