Feature Selection Based Hybrid Anomaly Intrusion Detection System Using K Means and RBF Kernel Function

Ravale, Ujwala; Marathe, Nilesh; Padiya, Puja

doi:10.1016/j.procs.2015.03.174

Cited by 140 publications

(62 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For a selected feature space, the hybrid technique reported an accuracy of 100% for DoS and 87.01% for all classes of attacks with a significantly lower false alarm rate. The results represents a good performance for the hybrid approach proposed in [24].…”

confidence: 57%

“…A hybrid approach for anomaly intrusion detection with a prediction module is studied in [24]. One of the key components of multistage attacks is the preponderance of network anomalies, which can populate the network server to the extent of exhausting the available computing resources such as memory, processors, data structures, and storage.…”

confidence: 99%

See 1 more Smart Citation

A Survey of Cyber Security Approaches for Attack Detection, Prediction, and Prevention

Ibor¹,

Oladeji²,

Okunoye³

2018

IJSIA

View full text Add to dashboard Cite

show abstract

confidence: 57%

confidence: 99%

A Survey of Cyber Security Approaches for Attack Detection, Prediction, and Prevention

Ibor¹,

Oladeji²,

Okunoye³

2018

IJSIA

View full text Add to dashboard Cite

show abstract

“…KSVM [12] 88.71 --NADCP [8] 91 Finally, the algorithm proposed in this paper is compared with several anomaly detection algorithms of the same category, and it is concluded that the algorithm proposed in this paper has obvious advantages in terms of detection performance.…”

Section: Experiments and Results Analysismentioning

confidence: 99%

Research on the Intrusion Detection Method Based on Differentiated Cluster Center Offset Measure

Chen

Nian

2017

MATEC Web Conf.

View full text Add to dashboard Cite

Abstract. In this paper, a kind of local outlier mining method based on differentiated cluster center offset measure is proposed through which the outlier degree of sample can be calculated by use of the normal behavior model constructed by normal data sample and the preset anomaly threshold value, and whether the testing sample belong to intrusion behavior can thus be determined. Furthermore, KDD99 data set is also utilized to test the said method, and the experimental results show that the method proposed in this paper possesses higher detection rate and lower false alarm rate. Key words: Intrusion detection; Anomaly detection; Outlier mining; Cluster center offset OverviewEssentially, the intrusion detection is a classification problem, and the to-be-detected host audit records or network traffic data can be classified as normal behavior or intrusion behavior [1]. Depending on different detection methods, the intrusion detections can be divided into two categories, i.e. anomaly detection and misuse detection. The local outlier mining method studied in this paper belongs to one of such anomaly detection methods.The hypothesis of anomaly detection is that the intruder activity is anomalous to the activity of normal subject [2]. The activity profile of normal activity of the subject can be established according to this concept, and comparisons can be made between the activity status of current subject and the activity profile. When the statistical law is violated, the activity may be considered as an intrusion. The difficult problem for anomaly detection is how to establish the activity profile of normal activity and how to design the statistical algorithm, so that normal operations are not considered as intrusion or the real intrusion behavior are not neglected.Outlier mining technology is very suitable for the completion of anomaly-based intrusion detection. Through the analysis of network data characteristics, two facts can be drawn as below. Firstly, there are significant differences between normal behavior and anomaly behavior. Secondly, in practical applications, the number of anomaly behavior is much lower than that of the normal behavior. In respect of the entire network behavior, intrusion behavior belongs to anomaly data in small numbers, and it can be processed by treating it as outliers in the dataset, which can better reflect the nature of such invasion. At the same time, in respect of other intrusion detection methods, the anomaly detection method based on outlier mining can identify those new categories of attack samples which have not yet appeared [3], which represents the advantage which is not possessed by other detection methods. Therefore, the problem of intrusion detection can be transformed into the outlier mining problem in the network behavior data set. Outlier Mining Method Based on Differentiated Cluster Center Offset MeasureAlthough many outlier mining methods have been proposed in recently-published literature, yet only a few of them are applied to the network anomaly detection. One o...

show abstract

“…The development and deployment of sensor networks was motivated by defence applications. However, these networks are now used in many application areas, including home automation, healthcare applications, environment and habitat monitoring etc.. A wireless sensor network normally constitutes a ad-hoc network, meaning that each sensor supports a multi-hop routing [17]. Many authentication protocols for WSNs have been proposed for medical applications.…”

Section: Related Workmentioning

confidence: 99%

A Secure Intrusion Detection System for Heterogeneous Wireless Sensor Networks

Kantharaju¹,

Lingareddy²

2017

IJCA

View full text Add to dashboard Cite

The intrusion detection is defined as a mechanism for a wireless sensor network to detect the existence of incorrect and inappropriate moving attackers in the network. We consider the intrusion detection issue according to two sensing models such as homogeneous and heterogeneous sensing models. We derive the detection probability by considering these two sensing models. Further, we discuss the broadcast reachability and network connectivity, which are very important conditions to make sure the detection probability in wireless networks. In this paper Watchdog monitoring technique is presented to detect misbehaving nodes. It is based on the broadcast concept of communication in sensor networks, where each node hears the communication of surrounding nodes even if it is not intended.

show abstract

Feature Selection Based Hybrid Anomaly Intrusion Detection System Using K Means and RBF Kernel Function

Cited by 140 publications

References 8 publications

A Survey of Cyber Security Approaches for Attack Detection, Prediction, and Prevention

A Survey of Cyber Security Approaches for Attack Detection, Prediction, and Prevention

Research on the Intrusion Detection Method Based on Differentiated Cluster Center Offset Measure

A Secure Intrusion Detection System for Heterogeneous Wireless Sensor Networks

Contact Info

Product

Resources

About