Unsupervised anomaly detection method based on improved CURE clustering algorithm

Tongxin Xuebao/Journal on Communications

Volumn 31, Issue 7, 2010, Pages

  Zhou, Ya Jian ^a   Xu, Chen ^b   Li, Ji Guo ^b  

^a BEIJING UNIVERSITY OF POSTS AND TELECOMMUNICATIONS   (China)

^b HOHAI UNIVERSITY   (China)

Author keywords

Clustering; CURE; Data mining; Hyper rectangle; Unsupervised anomaly detection

Indexed keywords

CURE; CURE CLUSTERING ALGORITHMS; DATA SETS; NETWORK CONNECTION; NORMAL MODEL; UNSUPERVISED ANOMALY DETECTION;

CURING; DATA MINING; GEOMETRY;

CLUSTERING ALGORITHMS;

EID: 77955449038     PISSN: 1000436X     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (14)

1. Anderson J P. Computer Security Threat Monitoring and Surveillance [R]. James P Anderson Co, Fort Washington, Pennsylvania, 1980.
2. Jiang J C, Ma H T, Ren D E, et al. A survey of intrusion detection research on network security [J]. Journal of Software, 2000, 11(11): 1460-1466.
3. Portnoy L, Eskin E, Stolfo S J. Intrusion detection with unlabeled data using clustering [A]. Proceedings of ACM CSS Workshop on Data Mining Applied to Security (DMSA2001) [C]. Philadelphia, 2001. 5-8.
4. Jiang S Y, Song X, Wang H, et al. A clustering-based method for unsupervised intrusion detections [J]. Pattern Recognition Letters, 2006, 27(7): 802-810.
5. Eskin E, Arnold A, Prerau M, et al. A geometric framework for unsupervised anomaly detection: detecting intrusions in unlabeled data [A]. Applications of Data Mining in Computer Security [C]. Boston, 2002. 78-99.
6. Oldmeadow J, Ravinutala S, Leckie C. Adaptive clustering for network intrusion detection [A]. Advances in Knowledge Discovery and Data Mining [C]. Heidelberg, 2004. 255-259.
7. Leung K, Leckie C. Unsupervised anomaly detection in network intrusion detection using clusters [A]. Proceedings of the Twenty-Eighth Australasian Computer Science Conference [C]. Sydney, 2005. 333-342.
8. Zanero S, Savaresi S M. Unsupervised learning techniques for an intrusion detection system [A]. Proceedings of the 2004 ACM Symposium on Applied Computing [C]. New York, 2004. 412-419.
9. Luo M, Wang L, Zhang H, et al. A research on intrusion detection based on unsupervised clustering and support vector machine [A]. Information and Communications Security [C]. Heidelberg, 2003. 325-336.
10. Gao N, Feng D G, Xiang J. A data-mining based DoS detection technique [J]. Chinese Journal of Computers, 2006, 29(6): 944-951.
11. Xiao L Z, Shao Z Q, Ma H H, et al. An algorithm for automatic clustering number determination in networks intrusion detection [J]. Journal of Software, 2008, 19(8):2140-2148.
12. Guha S, Rastogi R, Shim S. CURE: an efficient clustering algorithm for large databases [A]. Proceedings of the 1998 ACM SIGMOD International Conference on Management of Data [C]. New York, 1998. 73-84.
13. Zhang H Y, Liu X D, Duan X D, et al. The comparison of clustering methods in data mining [J]. Computer Applications and Software, 2002, (2): 5-6, 77.
14. Han J, Kamber M. Data Mining: Concepts and Techniques [M]. Beijing: China Machine Press, 2004.