Real-time anomaly detection systems for Denial-of-Service attacks by weighted k-nearest-neighbor classifiers

Expert Systems with Applications

Volumn 38, Issue 4, 2011, Pages 3492-3498

  Su, Ming Yang ^a  

^a MING CHUAN UNIVERSITY   (Taiwan)

Author keywords

DoS attacks; Feature selection; Feature weighting; Genetic algorithm; KNN (k nearest neighbor) classification; Network security; NIDS (network intrusion detection system)

Indexed keywords

DOS ATTACKS; FEATURE SELECTION; FEATURE WEIGHTING; K-NEAREST NEIGHBORS; NETWORK INTRUSION DETECTION SYSTEMS;

CLASSIFIERS; COMPUTER CRIME; GENETIC ALGORITHMS; INTRUSION DETECTION; NETWORK SECURITY; REAL TIME SYSTEMS; SCALES (WEIGHING INSTRUMENTS);

FEATURE EXTRACTION;

EID: 78650707301     PISSN: 09574174     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.eswa.2010.08.137     Document Type: Article

References (17)

1. Abbes, T.; Bouhoula, A.; Rusinowitch, M. (2004). Protocol analysis in intrusion detection using decision tree. In Proceedings of the IEEE conference on information technology: coding and computing (pp. 404-409).
2. G. Carl, G. Kesidis, R.R. Brooks, and S. Rai Denial-of-service attack-detection techniques IEEE Internet Computing January-February 2006 82 89
3. DARPA Intrusion Detection Evaluation, .
4. D. Gavrilis, and E. Dermatas Real-time detection of distributed denial-of-service attacks using rbf networks and statistical features Computer Networks 48 2 2005 235 245
5. Hofman, A.; Horeis, T.; Sick, B. (2004). Feature selection for intrusion detection: an evolutionary wrapper approach. In Proceedings of the IEEE neural networks (Vol. 2, pp. 1563-1568).
6. J.H. Holland Adaptation in natural and artificial systems: An introductory analysis with applications to biology, control, and artificial intelligence 1992 MIT Press
7. IP Traffic. .
8. KDD CUP, (1999a). Datasets .
9. KDD CUP, (1999b). A list of features, .
10. A. Kulkarni, and S. Bush Detecting distributed denial-of-service attacks using Kolmogorov complexity metrics Journal of Network and Systems Management 14 1 2006 69 80
11. Lee, C. H.; Chung, J. W.; Shin, S. W (2006). Network intrusion detection through genetic feature selection. In Proceedings of the IEEE conference on software engineering, artifical intelligence, networking, and parallel/distributed computing (SNPD) (pp. 109-114).
12. Y. Liao, and V. Rao Vemuri Use of k-nearest neighbor classifier for intrusion detection Computers & Security 21 5 2002 439 448
13. Middlemiss, M. J.; Dick, G. (2003). Weighted feature extraction using a genetic algorithm for intrusion detection. In Proceedings of the evolutionary computation (Vol. 3, pp. 1669-1675).
14. Mukkamala, S.; Sung, A. H. (2002). Feature ranking and selection for intrusion detection using support vector machines. In Proceedings of the conference on information and knowledge engineering (pp. 503-509).
15. Stein, G.; Chen, B.; Wu, A. S.; Hua, K. A. (2005). Decision tree classifier for network intrusion detection with GA-based feature selection. In Proceedings of the ACM southeast regional conference (Vol. 2, pp. 136-141).
16. Sung, A. H.; Mukkamala, S. (2003) Identifying important features for intrusion detection using support vector machines and neural networks. In Proceedings of the IEEE symposium on applications and the Internet (pp. 209-216).
17. H. Wang, D. Zhang, and K.G. Shin Change-point monitoring for the detection of DoS attacks IEEE Transactions on Dependable and Secure Computing 1 4 2004 193 208