A detailed analysis of the KDD CUP 99 data set

IEEE Symposium on Computational Intelligence for Security and Defense Applications, CISDA 2009

Volumn , Issue , 2009, Pages

  Tavallaee, Mahbod ^a   Bagheri, Ebrahim ^b   Lu, Wei ^a   Ghorbani, Ali A ^a  

^a UNIVERSITY OF NEW BRUNSWICK   (Canada)

^b NATIONAL RESEARCH COUNCIL CANADA   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; DATA SETS; STATISTICAL ANALYSIS;

ARTIFICIAL INTELLIGENCE;

EID: 77950575061     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CISDA.2009.5356528     Document Type: Conference Paper

References (24)

1. C. E. Landwehr, A. R. Bull, J. P. McDermott, and W. S. Choi, "A taxonomy of computer program security flaws, " ACM Comput. Surv., vol. 26, no. 3, pp. 211-254, 1994.
2. M. Shyu, S. Chen, K. Sarinnapakorn, and L. Chang, "A novel anomaly detection scheme based on principal component classifier, " Proceedings of the IEEE Foundations and New Directions of Data Mining Workshop, in conjunction with the Third IEEE International Conference on Data Mining (ICDM03), pp. 172-179, 2003.
3. KDD Cup 1999. Available on: http://kdd.ics.uci.edu/databases/kddcup99/ kddcup99.html, Ocotber 2007.
4. J. McHugh, "Testing intrusion detection systems: a critique of the 1998 and 1999 darpa intrusion detection system evaluations as performed by lincoln laboratory, " ACM Transactions on Information and System Security, vol. 3, no. 4, pp. 262-294, 2000.
5. S. J. Stolfo, W. Fan, W. Lee, A. Prodromidis, and P. K. Chan, "Costbased modeling for fraud and intrusion detection: Results from the jam project, " discex, vol. 02, p. 1130, 2000.
6. R. P. Lippmann, D. J. Fried, I. Graf, J. W. Haines, K. R. Kendall, D. McClung, D. Weber, S. E. Webster, D. Wyschogrod, R. K. Cunningham, and M. A. Zissman, "Evaluating intrusion detection systems: The 1998 darpa off-line intrusion detection evaluation, " discex, vol. 02, p. 1012, 2000.
7. MIT Lincoln Labs, 1998 DARPA Intrusion Detection Evaluation. Available on: http://www.ll.mit.edu/mission/communications/ist/corpora/ideval/index.html, February 2008.
8. S. Axelsson, "The base-rate fallacy and the difficulty of intrusion detection, " ACM Transactions on Information and System Security (TISSEC), vol. 3, no. 3, pp. 186-205, 2000.
9. J. Gaffney Jr and J. Ulvila, "Evaluation of intrusion detectors: A decision theory approach, " in Proceedings of IEEE Symposium on Security and Privacy, (S&P), pp. 50-61, 2001.
10. G. Di Crescenzo, A. Ghosh, and R. Talpade, "Towards a theory of intrusion detection, " Lecture notes in computer science, vol. 3679, p. 267, 2005.
11. A. Cardenas, J. Baras, and K. Seamon, "A framework for the evaluation of intrusion detection systems, " in Proceedings of IEEE Symposium on Security and Privacy, (S&P), p. 15, 2006.
12. G. Gu, P. Fogla, D. Dagon, W. Lee, and B. Skoríc, "Measuring intrusion detection capability: An information-theoretic approach, " in Proceedings of ACM Symposium on Information, computer and communications security (ASIACCS06), pp. 90-101, ACM New York, NY, USA, 2006. (Pubitemid 46644729)
13. M. Mahoney and P. Chan, "An Analysis of the 1999 DARPA/Lincoln Laboratory Evaluation Data for Network Anomaly Detection, " LECTURE NOTES IN COMPUTER SCIENCE, pp. 220-238, 2003. (Pubitemid 37171501)
14. L. Portnoy, E. Eskin, and S. Stolfo, "Intrusion detection with unlabeled data using clustering, " Proceedings of ACM CSS Workshop on Data Mining Applied to Security, Philadelphia, PA, November, 2001.
15. K. Leung and C. Leckie, "Unsupervised anomaly detection in network intrusion detection using clusters, " Proceedings of the Twenty-eighth Australasian conference on Computer Science-Volume 38, pp. 333-342, 2005.
16. J. Quinlan, C4.5: Programs for Machine Learning. Morgan Kaufmann, 1993.
17. G. John and P. Langley, "Estimating continuous distributions in Bayesian classifiers, " in Proceedings of the Eleventh Conference on Uncertainty in Artificial Intelligence, pp. 338-345, 1995.
18. R. Kohavi, "Scaling up the accuracy of naive-Bayes classifiers: A decision-tree hybrid, " in Proceedings of the Second International Conference on Knowledge Discovery and Data Mining, vol. 7, 1996.
19. L. Breiman, "Random Forests, " Machine Learning, vol. 45, no. 1, pp. 5-32, 2001.
20. D. Aldous, "The continuum random tree. I, " The Annals of Probability, pp. 1-28, 1991.
21. D. Ruck, S. Rogers, M. Kabrisky, M. Oxley, and B. Suter, "The multilayer perceptron as an approximation to a Bayes optimaldiscriminant function, " IEEE Transactions on Neural Networks, vol. 1, no. 4, pp. 296-298, 1990.
22. C. Chang and C. Lin, "LIBSVM: a library for support vector machines, " 2001. Software available at http://www.csie.ntu.edu.tw/cjlin/libsvm.
23. "Waikato environment for knowledge analysis (weka) version 3.5.7." Available on: http://www.cs.waikato.ac.nz/ml/weka/, June, 2008.
24. "Nsl-kdd data set for network-based intrusion detection systems." Available on: http://nsl.cs.unb.ca/NSL-KDD/, March 2009.