[METRON-1366] Add an entropy stellar function

• Type: Improvement
• Status: Done
• Priority: Major
• Resolution: Done
• Fix Version/s: 0.5.0
• Assignee: Casey Stella
• Reporter: Casey Stella
• Created: 15/Dec/17 23:30
• Updated: 22/May/18 19:34
• Resolved: 11/Jan/18 21:48

Description

Trending entropy for various volumetric statistics (e.g. netflow data) has been a useful metric for intrusion detection (see http://www.cs.bu.edu/techreports/pdf/2005-002-anomaly-mining.pdf). To wit, it makes some sense to add an entropy calculation for Stellar. Used in conjunction with the profiler and an outlier detector, we can recreate the work of Lakhina referenced above.

Issue Links

• links to: GitHub Pull Request #872