Clustering-based network intrusion detection

International Journal of Reliability, Quality and Safety Engineering

Volumn 14, Issue 2, 2007, Pages 169-187

  Zhong, Shi ^a   Khoshgoftaar, Taghi M ^a   Seliya, Naeem ^b  

^a Florida Atlantic Univ   (United States)

^b UNIVERSITY OF MICHIGAN DEARBORN   (United States)

Author keywords

Classification techniques; Clustering algorithms; Network intrusion detection

Indexed keywords

CLASSIFICATION (OF INFORMATION); CLUSTERING ALGORITHMS; DATA MINING; DISTRIBUTED DATABASE SYSTEMS; INTRUSION DETECTION; LEARNING SYSTEMS; TELECOMMUNICATION TRAFFIC;

CLASSIFICATION TECHNIQUES; K-MEANS; NETWORK INTRUSION DETECTION; NETWORK TRAFFIC; UNSUPERVISED LEARNING METHODS;

NETWORK SECURITY;

EID: 34249896701     PISSN: 02185393     EISSN: None     Source Type: Journal    
DOI: 10.1142/S0218539307002568     Document Type: Article

References (32)

1. V. Kumar, Parallel and distributed computing for cybersecurity. IEEE Distributed Systems 6(10) 2005.
2. Z.-X. Yu, J.-R. Chen and T.-Q. Zhu, A novel adaptive intrusion detection system based on data mining, in Proceedings IEEE International Conference on Machine Learning and Cybernetics 4 (IEEE Computer Society) (2005), pp. 2390-2395.
3. X. Zhu, Z. Huang and H. Zhou, Design of a, multi-agent based intelligent intrusion detection system, in Proceedings 1st International Symposium on Pervasive Computing and Applications (Urumqi, China, 2006) (IEEE Computer Society), pp. 290-295.
4. W. Li, K. Zhang, B. Li and B. Yang, An efficient framework for intrusion detection based on data mining, in Proceedings 2005 ICSC Congress on Computational Intelligence Methods and Applications (IEEE Computer Society) (2005), p. 4.
5. C.-T. Lu, A. P. Boedihardjo and P. Manalwar, Exploiting efficient data mining techniques to enhance intrusion detection systems, in Proceedings IEEE International Conference on Information Reuse and Integration (Las Vegas, NV) (IEEE Computer Society, 2005), pp. 512-517.
6. T. M. Khoshgoftaar, C. Seiffert and N. Seliya., Labeling network event records foiintrusion detection in a, wireless lan, in Proceedings IEEE International Conference on Information Reuse and Integration (Waikoloa Village, HI) (IEEE Computer Society) (2006), pp. 200-206.
7. J. Zhang and M. Zulkernine, A hybrid network intrusion detection technique using random forests, in Proceedings 1st International Conference on Availability, Reliability and Security (IEEE Computer Society) (2006), p. 8.
8. W. Lee, S. Stolfo and K. Mok, Mining in a data-flow environment: Experience in network intrusion detection, in Proc. 5th ACM SIGKDD Int. Conf. Knowledge Discovery Data Mining (San Diego, CA) (1999), pp. 114-124.
9. D. E. Denning, An intrusion detection model, IEEE Trans. Software Engineering 13 (1987) 222-232.
10. E. Eskin, Anomaly detection over noisy data using learned probability distributions, in Proc. 17th Int. Conf. Machine Learning (San Francisco, CA) (2000), pp. 255-262.
11. L. Portnoy, E. Eskin and S. Stolfo, Intrusion detection with unlabeled data using clustering, in ACM Workshop on Data Mining Applied to Security (Philadelphia, PA) (2001).
12. N. Ye and X. Li, A scalable clustering technique for intrusion signature recognition, in Proc. 2nd IEEE SMC Information Assurance Workshop (2001), pp. 1-4.
13. Y. Guan, A. A. Ghorbani and N. Belacel, Y-means: A clustering method for intrusion detection, in Canadian Conference on Electrical and Computer Engineering, Montrai, Qubec, Canada (2003), pp. 1-4.
14. T. M. Khoshgoftaar, S. V. Nath, S. Zhong and N. Seliya., Intrusion detection in wireless networks using clustering techniques with expert analysis, in Proceedings 4th International Conference on Machine Learning and Applications (Los Angeles, CA) (2005), p. 6.
15. S. Zhong, T. M. Khoshgoftaar and N. Seliya, Evaluating clustering techniques for network intrusion detection, in 10th ISSAT Int. Conf. on Reliability and Quality Design (Las Vegas, Nevada, USA) (2004), pp. 173-177.
16. J. MacQueen, Some methods for classification and analysis of multivariate observations. In Proc. 5th Berkeley Symp. Math. Statistics and Probability (1967), pp. 281-297.
17. J. D. Banfield and A. E. Raftery, Model-based Gaussian and non-Gaussian clustering, Biometrics 49(3) (1993) 803-821.
18. T. Kohonen, Self-Organizing Map (Springer-Verlag, New York, 1997).
19. T. M. Martinetz, S. G. Berkovich and K. J. Schulten, Neural-Gas network for vector quantization and its application to time-series prediction, IEEE Trans. Neural Networks 4(4) (1993) 558-569.
20. B. Fischer, T. Zoller and J. M. Buhmann, Path based pairwise data clustering with application to texture segmentation, Lecture Notes in Computer Science 2134 (2001) 235-250.
21. G. Karypis, E.-H. Han and V. Kumar, Chameleon: Hierarchical clustering using dynamic modeling, IEEE Computer 32(8) (1999) 68-75.
22. G. Karypis, CLUTO -A Clustering Toolkit, Dept. of Computer Science, University of Minnesota, May 2002. http://www-users.cs.umn.edu/ ~karypis/cluto/.
23. S. Zhong and J. Ghosh, A unified framework for model-based clustering, Journal of Machine Learning Research 4 (2003) 1001-1037.
24. S. Zhong, T. M. Khoshgoftaar and N. Seliya., Analyzing software measurement data with clustering techniques, IEEE Intelligent Systems 19(2) (2004) 20-27.
25. A. P. Dempster, N. M. Laird and D. B. Rubin, Maximum-likelihood from incomplete data via the EM algorithm, Journal of the Royal Statistical Society B 39(1) (1977) I-38.
26. J. A. Blimes, A gentle tutorial of the EM algorithm and its application to parameter estimation for Gaussian mixture and hidden Markov models, Technical report, University of California at Berkeley (1998).
27. C. M. Bishop, Neural Networks for Pattern Recognition (Oxford University Press, 1995).
28. T. M. Khoshgoftaar and M. E. Abushadi, Resource-sensitive intrusion detection models for network traffic, in Proceedings of the 8th IEEE International Symposium on High Assurance Systems Engineering (Tampa., Florida,) (2004), pp. 249-258.
29. W. Lee, S. Stolfo and K. Mok, A data, mining framework for building intrusion detection models, in Proc. IEEE Symposium on Security and Privacy (1999).
30. A. H. Sung and S. Mukkamala, Identifying important features for intrusion detection using support vector machines and neural networks, in Proc. IEEE Symposium on Applications and the Internet (Orlando, FL) (2003), pp. 209-216.
31. P. S. Bradley, U. M. Fayyad and C. Reina, Scaling clustering algorithms to large databases, in Proc. 4th ACM SIGKDD Int. Conf. Knowledge Discovery Data Mining (1998), pp. 9-15.
32. F. Farnstrom, J. Lewis and C. Elkan, Scalability for clustering algorithms revisited, SIGKDD Explorations 2(1) (2000) 51-57.