Analyzing TCP traffic patterns using self organizing maps

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3617 LNCS, Issue , 2005, Pages 83-90

  Zanero, Stefano ^a  

^a POLITECNICO DI MILANO   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER NETWORKS; DATA MINING; LEARNING SYSTEMS; NETWORK PROTOCOLS; PATTERN RECOGNITION; SELF ORGANIZING MAPS;

ANOMALY DETECTION SYSTEM; INTRUSION DETECTION SYSTEMS; LEARNING TECHNIQUES; NETWORK-BASED APPLICATIONS;

TELECOMMUNICATION TRAFFIC;

EID: 33745165284     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11553595_10     Document Type: Conference Paper

References (17)

1. Anderson, J.P.: Computer security threat monitoring and surveillance. Technical report, J. P. Anderson Co., Ft. Washington, Pennsylvania (1980)
2. Zanero, S., Savaresi, S.: Unsupervised learning techniques for an intrusion detection system. In: Proc. of the 14th Symp. on Applied Computing, ACM SAC 2004. (2004)
3. Kruegel, C., Mutz, D., Valeur, F., Vigna, G.: On the detection of anomalous system call arguments. In: Proc. of ESORICS 2003. (2003)
4. Kohonen, T.: Self-Organizing Maps, 3 edn. Springer-Verlag, Berling (2001)
5. Ptacek, T.H., Newsham, T.N.: Insertion, evasion, and denial of service: Eluding network intrusion detection. Technical Report T2R-0Y6, Secure Networks, Calgary, Canada (1998)
6. Mahoney, M., Chan, P.: Detecting novel attacks by identifying anomalous network packet headers. Technical Report CS-2001-2, Florida Institute of Technology (2001)
7. Yeung, D.Y., Chow, C.: Parzen-window network intrusion detectors. In: Proc. of the 16th Int'l Conf. on Pattern Recognition. Volume 4. (2002) 385-388
8. Labib, K., Vemuri, R.; NSOM: A real-time network-based intrusion detection system using self-organizing maps. Technical report, Dept. of Applied Science, University of California, Davis (2002)
9. Mahoney, M.V., Chan, P.K.: Learning rules for anomaly detection of hostile network traffic. In: Proc. of the 3rd IEEE Int'l Conf. on Data Mining, (2003) 601
10. Hartigan, J.A.: Clustering Algorithms. Wiley (1975)
11. Tan, K., Collie, B.: Detection and classification of TCP/IP network services. In: Proc. of the Computer Security Applications Conf. (1997) 99-107
12. Wang, K., Stolfo, S.J.: Anomalous payload-based network intrusion detection. In: RAID Symposium. (2004)
13. Cox, T.F., Cox, M.A.A.: Multidimensional Scaling. Monographs on Statistics and Applied Probability. Chapman & Hall (1995)
14. Jolliffe, I.T.: Principal Component Analysis. Springer Verlag (1986)
15. Zanero, S.: Improving self organizing map performance for network intrusion detection. In: SDM 2005 Workshop on "Clustering High Dimensional Data and its Applications", submitted for publication. (2004)
16. McHugh, J.: Testing intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by lincoln laboratory. ACM Trans. on Information and System Security 3 (2000) 262-294
17. Yamanishi, K., ichi Takeuchi, J., Williams, G.J., Milne, P.: On-line unsupervised outlier detection using finite mixtures with discounting learning algorithms. In: Proc. of the 6th ACM SIGKDD Int'l Conf. on Knowledge Discovery and Data Mining. (2000) 320-324