Anomaly detection based on unsupervised niche clustering with application to network intrusion detection

Proceedings of the 2004 Congress on Evolutionary Computation, CEC2004

Volumn 1, Issue , 2004, Pages 502-508

  Leon, Elizabeth ^a   Nasraoui, Olfa ^a   Gomez, Jonatan ^b  

^a University of Memphis   (United States)

^b UNIVERSITY OF MEMPHIS   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA SETS; NETWORK INTRUSION DETECTION; NICHE CLUSTERING;

DATA REDUCTION; FUZZY CONTROL; MATHEMATICAL OPERATORS; NEURAL NETWORKS; OPTIMIZATION; PROBLEM SOLVING; TREES (MATHEMATICS);

COMPUTER NETWORKS;

EID: 4344698326     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (27)

1. S. Forrest, A. Perelson, L. Allen, and R. Cherukury, "Self-nonself discrimination in a computer," in Proceedings of the IEEE Symp. on research in security and privacy, 1994.
2. S. Singh, "Anomaly detection using negative selection based on the r-contiguous matching rule," in 1st International Conference on Artificial Immune Systems(ICARIS), pp. 99-106, 2002.
3. F. Gonzalez and D. Dasgupta, "An immunogenetic technique to detect anomalies in network traffic," in Proceedings of the genetic and evolutionary compilation conference, GECCO 2002, pp. 1081-1088, Morgan Kaufman Publishers, 2002.
4. S. Kumar and E. H. Spafford, "A pattern matching model for misuse intrusion detection," in 17th National Computer Security Conference, pp. 11-21, 1994.
5. S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff, "A sense of self for Unix processes," in Proceedings of the 1996 IEEE Symposium on Research in Security and Privacy, pp. 120-128, IEEE Computer Society Press, 1996.
6. T. Lane and C. E. Brodley, "An application of machine learning to anomaly detection," in Proc. 20th NIST-NCSC National Information Systems Security Conference, pp. 366-380, 1997.
7. T. Lane and C. E. Brodley, "Sequence matching and learning in anomaly detection for computer security," in AI Approaches to Fraud Detection and Risk Management (Fawcett, Haimowitz, Provost, and Stolfo, eds.), pp. 43-49, AAAI Press, 1997.
8. W. Lee, S. Stolfo, and K. Mok, "Mining Audit Data to Build Intrusion Detection Models," in International Conference Knowledge Discovery and Data Mining (KDD'98), pp. 66-72, 1998.
9. S. Hofmeyr, A. Somayaji, and S. Forrest, "Intrusion Detection Using Sequences of Systems Call," Computer Security, no. 6, pp. 151-180, 1998.
10. M. Mahoney and P. Chan, "Learning nonstationary models of normal network traffic for detecting novel attacks," in Proceedings of the eighth ACM SIGKDD international conference on Knowledge discovery and data mining, pp. 23-26, 2002.
11. W. Fan, W. Lee, M. Miller, S. Stolfo, and P. Chan, "Using artificial anomalies to detect unknown and known network intrusions," in Proceedings of the first IEEE International conference on Data Mining, 2001.
12. F. Gonzalez and D. Dasgupta, "Neuro-immune and self-organising map approaches to anomaly detection: A comparison," in First International Conference on Artificial Immune Systems, Sept. 2002.
13. R. Duda and P. Hart, Pattern Classification and Scene Analysis. NY: Wiley Interscience, 1973.
14. R. Krishnapuram and J. M. Keller, "A possibilistic approach to clustering," IEEE Trans. Fuzzy Syst., vol. 1, pp. 98-110, May 1993.
15. J. M. Jolion, P. Meer, and S. Bataouche, "Robust clustering with applications in computer vision," vol. 13, pp. 791-802, Aug. 1991.
16. O. Nasraoui and R. Krishnapuram, "Clustering using a genetic fuzzy least median of squares algorithm," in North American Fuzzy Information Processing Society Conference, (Syracuse NY), Sep. 1997.
17. O. Nasraoui and R. Krishnapuram, "A novel approach to unsupervised robust clustering using genetic niching," in Proceedings of the Ninth IEEE International Conference on Fuzzy Systems, pp. 170-175, 2000.
18. O. Nasraoui, E. Leon, and R. Krishnapuram, "Unsupervised niche clustering: Discovering an unknown number of clusters in noisy data sets," in Evolutionary Computing in Data Mining, Invited chapter, A. Ghosh and L. C. Jain, Eds, Springer Verlag, 2004.
19. O. Nasraoui and E. Leon, "Improved niching and encoding strategies for clustering noisy data sets," in Proceedings of Genetic and Evolutionary Computation Conference, Seattle, WA, 2004.
20. D. Goldberg and J. J. Richardson, "Genetic algorithms with sharing for multimodal function optimization," in Proceedings Second International Conference on Genetic Algorithm, pp. 41-49, 1987.
21. S. W. Mahfoud, "Crowding and preselection revisited," in Proceedings Second Conference Parallel Problem Solving from Nature, 1992.
22. S. W. Mahfoud, "A comparison of parallel and sequential niching methods," in Proceedings of the Sixth International Conference on Genetic Algorithms, 1995.
23. O. Nasraoui and R. Krishnapuram, "A robust estimator based on density and scale optimization, and its application to clustering," in IEEE International Conference on Fuzzy Systems, (New Orleans), pp. 1031-1035, Sep. 1996.
24. F. Provost, T. Fawcett, and R. Kohavi, "The case against accuracy estimation for comparing induction algorithms," in Proceedings of 15th intenational conference on machine learning, p. 445;453, 1998.
25. D. Wlodzislaw, "Data sets used for classification: Comparison of results," in http://www.phys.uni.torun.pl/kmk/projects/datasets.html.
26. F. Hoffmann, "Boosting a genetic fuzzy classifier," in BICS Seminar, Royal Institue of Technology, 2001.
27. K. Yamanishi, J. Takeuchi, and G. Williams, "On-line unsupervised outlier detection using finite mixtures with discounting learning algorithms," in In Proceedings of the Sixth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, 2000.