A data-mining based DoS detection technique

Jisuanji Xuebao/Chinese Journal of Computers

Volumn 29, Issue 6, 2006, Pages 944-951

  Gao, Neng ^a   Feng, Deng Guo ^a   Xiang, Ji ^a  

^a UNIVERSITY OF CHINESE ACADEMY OF SCIENCES   (China)

Author keywords

Association algorithm; Cluster algorithm; DoS (Denial of Service) attack; Real time detection

Indexed keywords

ALGORITHMS; AVAILABILITY; INTERNET;

APRIORI ASSOCIATION ALGORITHM; CLUSTER ALGORITHM; DENIAL OF SERVICE (DOS) ATTACK; DETECTION TECHNIQUE; EMPIRICAL NETWORK DATA; MALICIOUS PACKETS; PACKET ATTRIBUTE SPOOF TECHNIQUES; REAL TIME DETECTION; TRAFFIC PATTERNS;

DATA MINING;

EID: 33746497836     PISSN: 02544164     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (14)

1. Skoudies. Counter Hack. Beijing: China Machine Press, 2002 (in Chinese)
2. CERT/CC Coordination Center. Trends in Denial of Service Attack Technology. October 2001
3. Honig A., Howard A., Eskin E., Stolfo S.. Adaptive model generation: An architecture for the deployment of data miningbased intrusion detection systems. Data Mining for Security Applications, Kluwer, 2002
4. Han Jia-Wei, Kamber M.. Data Mining: Concepts and Techniques. Beijing: Higher Education Press, 2001 (in Chinese)
5. Portnoy L., Eskin E., Stolfo S. J.. Intrusion detection with unlabeled data using clustering. In: Proceedings of the ACM CSS Workshop on Data Mining Applied to Security (DMSA, 2001), Philadelphia, PA, 2001
6. Ertoz L., Eilertson E., Lazarevic A., Tan P., Dokas P., Srivastava J., Kumar. Detection and summarization of novel network attacks using data mining. Technical Report, 2003
7. The 1999 DARPA Intrusion Detection Evaluation Data set, Information Systems Technology Group of MIT Lincoln Laboratory, http://www.ll.mit.edu/IST/ideval/data/data_index.html
8. Mohiuddin S., Hershkop S., Bhan R., Stofo S.. Defending against a large scale denial-of-service attack. In: Proceedings of the IEEE. Workshop on Information Assurance and Security, New York, 2002
9. Barbara D.. ADAM: Detecting intrusions by data mining. In: Proceedings of the 2001 IEEE. Workshop on Information Assurance and Security, 2001
10. Staniford S., Hoagland J., McAlerney J.. Practical automated detection of stealthy portscans. Journal of Computer Security, 2002, 10 (1/2): 105-136
11. Tao Peng, Christopher Leckie, Kotagiri Ramamohanarao. Detecting distributed denial of service attacks using source ip address monitoring, draft, 2002
12. Brugger S. T.. Data mining methods for network intrusion detection. Technique Report, UC davis, 2004
13. Christian Borgelt. The apriori program source code. http://fuzzy.cs.uni-magdeburg.de/-borgelt/, 2002
14. Lazarevic A., Ertoz L., Ozgur A., Srivastava J., Kumar V.. A comparative study of anomaly detection schemes in network intrusion detection. In: Proceedings of the 3rd SIAM Conference on Data Mining, San Francisco, 2003