An application of principal component analysis to the detection and visualization of computer network attacks

Annales des Telecommunications/Annals of Telecommunications

Volumn 61, Issue 1-2, 2006, Pages 218-234

  Labib, Khaled ^a   Vemuri, V Rao ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Computer security; Intruder detector; Principal component analysis; Statistical analysis; Teletraffic

Indexed keywords

COMPUTER NETWORKS; DATA TRANSFER; SECURITY OF DATA; SET THEORY; STATISTICAL METHODS; TELECOMMUNICATION TRAFFIC; VECTORS;

DATA SETS; INTRUDER DETECTOR; NETWORK TRAFFIC DATA; TELETRAFFIC;

PRINCIPAL COMPONENT ANALYSIS;

EID: 33645805216     PISSN: 00034347     EISSN: 19589395     Source Type: Journal    
DOI: 10.1007/BF03219975     Document Type: Article

References (21)

1. AXELSSON (S.), Intrusion Detection Systems: A Survey and Taxonom. Technical report 99-15, Dept. of Computer Engineering, Chalmers University of Technology, Goteborg, Sweden, March 2000.
2. CABRERA (J.), RAVICHANDRAN (B.), MEHRA (R.), Statistical Traffic Modeling for Network Intrusion Detection. Proceedings of the Eighth International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems, Aug. 2000.
3. th International Symposium on Recent Advances in Intrusion Detection, 2001, pp. 172-189.
4. OPPENHEIMER (D.), MARTONOSI (M.), Performance Signatures: A Mechanism for Intrusion Detection. Proceedings of the 1997 IEEE Information Survivability Workshop, 1997.
5. SHAH (H.), UNDERCOFFER (J.), JOSHI (A.), Fuzzy Clustering for Intrusion Detection. FUZZ-IEEE, 2003
6. DARPA Intrusion Detection Evaluation Project: http://www.ll.mit.edu/IST/ ideval/.
7. ALLEN (J.), CHRISTIE (A.), FITHEN (W.), MCHUGH (J.), PICKEL (J.), STONER (E.), State of the Practice: Intrusion Detection Technologies. Carnegie Mellon, SEI, Tech. Report CMU/SEI-99-TR-028, ESC-99-028, January 2000
8. YE (N.), Li (X.), CHEN (Q.), EMRAN (S.), XU (M.), Probabilistic Techniques for Intrusion Detection Based on Computer Audit Data. IEEE Transactions on Systems, Man and Cybernetics - Part A: Systems and Humans, 31, no 4, July 2001.
9. YE (N.), EMRAN (S.), CHEN (Q.), VILBERT (S.), Multivariate Statistical Analysis of Audit Trails for Host-Based Intrusion Detection. IEEE Transactions on Computers, 51, no 7, July 2002.
10. th, 2002, Cloudcroft, New Mexico, U.S.A.
11. TAYLOR (C.), ALVES-FOSS (J.), An Empirical Analysis of NATE - Network Analysis of Anomalous Traffic Events. New Security Paradigms Workshop'02, September 23-26, 2002, Virginia Beach, Virginia.
12. DUMOUCHEL (W.), SCHONLAU (M.), A Comparison of Test Statistics for Computer Intrusion Detection Based on Principal Component Regression of Transition Probabilities. Proceedings of the 30th Symposium an the Interface: Computing Science and Statistics. Fairfax Station, VA, March 6, 2000.
13. STANIFORD-CHEN (S.), HEBERLEIN (L.T.), Holding Intruders Accountable on the Internet. Proceedings of the Seventh ACM Conference on Computer and Communications Security.
14. HOTELLING (H.), Analysis of a Complex of Statistical Variables into Principal Components. Journal of Educational Psychology, 24:417-441, 1933.
15. DUDA (R.), HART (P.), STORK (D.), Pattern Classification. Second Edition, John Wiley & Sons, Inc., 2001.
16. HAYKIN (S.), Neural Networks: A Comprehensive Foundation. Second Edition. Prentice Hall Inc., 1999.
17. KOHONEN (T.), Self-Organizing Maps. New York, Springer-Verlag, 1995.
18. SKOUDIS (E.), Counter Hack: A Step-by-Step Guide to Computer Attacks and Effective Defenses. Prentice Hall Inc., 2002.
19. MCHUGH (J.), Testing Intrusion Detection Systems: Critique of the 1998 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory. ACM Transactions on Information and System Security, 3, no 4, November 2000, p. 262-294.
20. http://www.insightful.com/
21. S-Plus: Guide to Statistics, 2. Insightful Corporation, 2001.