Characterising Payload Entropy in Packet Flows

arXiv:2404.19121v1 Announce Type: new
Abstract: Accurate and timely detection of cyber threats is critical to keeping our online economy and data safe. A key technique in early detection is the classification of unusual patterns of network behaviour, often hidden as low-frequency events within complex time-series packet flows. One of the ways in which such anomalies can be detected is to analyse the information entropy of the payload within individual packets, since changes in entropy can often indicate suspicious activity - …

arxiv classification critical cs.cr cyber cyber threats data detection economy entropy events hidden key low network packet patterns payload safe series threats