You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@metron.apache.org by "Casey Stella (JIRA)" <ji...@apache.org> on 2017/12/15 23:31:02 UTC

[jira] [Created] (METRON-1366) Add an entropy stellar function

Casey Stella created METRON-1366:
------------------------------------

             Summary: Add an entropy stellar function
                 Key: METRON-1366
                 URL: https://issues.apache.org/jira/browse/METRON-1366
             Project: Metron
          Issue Type: Improvement
            Reporter: Casey Stella


Trending entropy for various volumetric statistics (e.g. netflow data) has been a useful metric for intrusion detection (see http://www.cs.bu.edu/techreports/pdf/2005-002-anomaly-mining.pdf).  To wit, it makes some sense to add an entropy calculation for Stellar.  Used in conjunction with the profiler and an outlier detector, we can recreate the work of Lakhina referenced above.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)