Detecting Anomalous LAN Activities under Differential Privacy

Table 1

Notation.

Differential Privacy (DP) Notation
	Privacy budget
	Probability of failing DP guarantees
	Sensitivity of algorithm
	Laplace distribution with mean 0 and scale
	Normal distribution with mean and standard deviation
System notation
	Number of LAN user s
	Number of data collection intervals
	User ’s ARP requests aggregate at interval
	Aggregate ARP requests of all LAN user s at interval
	Aggregate ARP requests of all LAN user s from interval 1 to
	Output after applying privacy-preserving algorithm
	Anomaly detection output