Anomaly detection and traceback scheme for cloud-edge networks

Cloud-edge networks (CEN) has revolutionized the traditional network architecture. However, there are many security issues in CEN needing to be solved. In this case, CEN administrator should be able to detect network anomalies and find out the sources of anomalies rapidly, and respond in time to block anomalies. In order to protect network systems with CEN, we propose a mechanism consisting of two modules, including anomaly detection and anomaly traceback. The self-similarity anomaly detection is introduced for the first time to detect anomalies. In addition, we also propose an anomaly traceback method which utilizes the characteristics of CEN. An CEN testbed is established to evaluate the mechanism we proposed. Results of experiments show that the proposed mechanism can discover anomalies quickly and accurately, and trace anomaly sources and find anomaly paths accurately.