Efficient detection of DDoS attacks with important attributes

Proceedings 2008 3rd International Conference on Risks and Security of Internet and Systems, CRiSIS 2008

Volumn , Issue , 2008, Pages 61-67

  Wang, Wei ^a,b   Gombault, Sylvain ^c  

^a CAMPUS DE BEAULIEU   (France)

^b INRIA   (France)

^c ECOLE DES MINES DE NANTES   (France)

Author keywords

Attribute selection; Bayesian networks; C4.5; DDoS attack detection; Intrusion detection system

Indexed keywords

BAYESIAN NETWORKS; COMPUTER CRIME; COMPUTERS; DISTRIBUTED PARAMETER NETWORKS; INFERENCE ENGINES; INTELLIGENT NETWORKS; INTERNET; SPEECH ANALYSIS;

ATTRIBUTE SELECTION; C4.5; DDOS ATTACK DETECTION; DETECTION ACCURACIES; EFFICIENT DETECTIONS; EMPIRICAL RESULTS; INFORMATION GAINS; INTRUSION DETECTION SYSTEM; NETWORK TRAFFICS; REAL COMPUTER NETWORKS;

INTRUSION DETECTION;

EID: 63249108778     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CRISIS.2008.4757464     Document Type: Conference Paper

References (16)

1. DARPA Intrusion Detection Evaluation, http://www.ll.mit.edu/IST/ideval/ docs/docs-index.html, 1999.
2. W. Lee, S. Stolfo, K. Mok, "A Data Mining Framework for Building Intrusion Detection Models", Proceedings of the 1999 IEEE Symposium on Security and Privacy, pp. 120-132, 1999.
3. L. Yu, H. Liu, "Feature Selection for High-Dimensional Data: A Fast Correlation-Based Filter Solution", pp. 856-863, ICML 2003.
4. R. O. Duda, P. E. Hart, and D. G. Stork. Pattern Classification. 2nd edition edition, 2004.
5. Y. Yang and J. Pedersen. A comparative study on feature selection in text categorization. pp. 412-420, ICML 1997.
6. H. Liu and, R. Setiono.Chi2: Feature selection and discretization of numeric attributes, Proc. IEEE 7th International Conference on Tools with Articial Intelligence, pp. 338-391, 1995.
7. D. Heckerman, A Tutorial on Learning With Bayesian Networks, Microsoft Research, Technical Report MSRTR-95-06, March 1995.
8. J. R. Quinlan. C4.5: Programs for Machine Learning. Morgan Kaufmann Publishers, 1993.
9. KDD Cup 1999 data (network intrusion detection): http://kdd.ics.uci.edu/ databases/kddcup99/kddcup99.ht ml.
10. M. Shyu, S. Chen, K. Sarinnapakorn, L. Chang, A novel anomaly detection scheme based on principal component classifier, pp. 172-179, ICDM workshop 2003.
11. S.T. Sarasamma, Q.A. Zhu and J. Huff, Hierarchical Kohonenen net for anomaly detection in network security, IEEE Transactions on Systems, Man and Cybernetics, Part B, vol. 35, no.2, pp. 302-312, 2005.
12. W. Wang, X. Guan and X. Zhang, "Processing of Massive Audit Data Streams for Real-Time Anomaly Intrusion Detection". Computer Communications, vol. 31, no. 1, pp. 58-72, 2008.
13. W. Wang, S. Gombault, A. Bsila, "Building multiple behavioral models for network intrusion identification". 2nd IEEE Workshop on Monitoring, Attack Detection and Mitigation, pp. 31-36, 2007.
14. I. Onut, A. Ghorbani, "Features vs. Attacks: A Comprehensive Feature Selection Model for Network Based Intrusion Detection Systems". pp. 19-36, ISC 2007.
15. W. Wang, S. Gombault, and T. Guyet. "Towards Fast Detecting Intrusions: Using Key Attributes of Network Traffic". The Third International Conference on Internet Monitoring and Protection (ICIMP2008), IEEE Computer society press, Bucharest, Romania, June 29 - July 5, 2008.
16. A. H. Sung, S. Mukkamala, "Identifying Important Features for Intrusion Detection Using Support Vector Machines and Neural Networks", Symposium on Applications and the Internet, 2003.