Chattering-free terminal sliding-mode observer for anomaly detection

This paper proposes a chattering-free terminal sliding-mode observer used for the network behavior anomaly detection in TCP/IP networks. The proposed observer can track the fluid-flow model representing the TCP/IP behaviors in a router level. Unlike traditional sliding-mode observers, the proposed observer behaves as a full-order dynamics during the sliding-mode motion. The smooth control signal of the observer can be directly utilized to estimate the queue length dynamics representing a distributed anomaly in the TCP/IP network. The simulations are carried out to verify the effectiveness of the proposed method.