Network traffic anomaly detection is crucial to guarantee stable and effective network operation.Nowadays

although PCA-based network-wide anomaly detector plays an important role

it cannot detect anomalous network traffic effectively in face of poison attacks.In order to solve poison attack problem aiming at PCA-based anomaly detector

poison attack strategies are investigated and classified

two metrics for quantifying poison traffic are proposed and three novel poison attack strategies are put forward.A robust PCA-based anomaly detection algorithm (for short RPCA) is proposed to resist poison attacks.Simulation experiment results show that RPCA algorithm can still perform very well in face of poison attacks

obviously superior to PCA-based anomaly detector

and its running time can satisfy the need of practical network anomaly detection.