Visualization of abnormal behavior detection using parallel coordinate and correspondence analysis

Abstract

Most of the network management part, especially a network security needs effective visualization methods for flooding connections. Because many web systems using huge users are suffering from huge normal connections with flooding attacks. Also, most of the connection cases have to be monitored for intrusion detection including any kinds of abnormal connection cases. Therefore, in this paper we propose an effective visualization method with a classification method for classifying between normal and abnormal flooding network status.