Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{209606,
        author = {Praveen Kumar Mishra and Aastha Singh},
        title = {NETWORK TRAFFIC ANALYSIS FOR DETECTING CYBER ATTACKS ( October 2026)},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {13},
        number = {5},
        pages = {2776-2783},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=209606},
        abstract = {Most attacks have to traverse a network at some point, and when they do so, they leave traces in the traffic. This paper investigates how those traces can be collected, measured and turned into alerts. We cover the most common ways to collect traffic data (packet captures, flow records and logs), the types of characteristics that are generally useful, and three main families of detection methods: signature-based, statistical and machine learning-based. We also describe how several well-known attacks (port scans, denial of service, brute force and botnet command-and-control) manifest themselves on the wire A step-by-step analysis pipeline is presented, as well as the most common public datasets used for evaluation and the corresponding metrics. Finally, we discuss the major challenges that remain in this area: encrypted traffic, class imbalance, concept drift and the gap between laboratory test results and real-world network deployments. The goal is to provide a clear, practical overview for students and junior security analysts rather than presenting a novel algorithm.},
        keywords = {network traffic analysis, intrusion detection, anomaly detection, NetFlow, machine learning, DDoS, encrypted traffic.},
        month = {October},
        }