Using clustering to improve the KNN-based classifiers for online anomaly network traffic identification

Journal of Network and Computer Applications

Volumn 34, Issue 2, 2011, Pages 722-730

  Su, Ming Yang ^a  

^a MING CHUAN UNIVERSITY   (Taiwan)

Author keywords

DoS (Denial of Service) attacks; Flooding attacks; Genetic algorithm; KNN (K nearest neighbor) classification; Online anomaly detection; Unsupervised clustering

Indexed keywords

DENIAL OF SERVICE; FLOODING ATTACKS; K-NEAREST NEIGHBORS; ONLINE ANOMALY DETECTION; UNSUPERVISED CLUSTERING;

CLASSIFIERS; COMPUTER CRIME; GENETIC ALGORITHMS; TELECOMMUNICATION NETWORKS;

CLUSTERING ALGORITHMS;

EID: 79251595062     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2010.10.009     Document Type: Article

References (22)

1. Abbes T, Bouhoula A, Rusinowitch M. Protocol analysis in intrusion detection using decision tree. In: Proceedings of the IEEE conference on information technology: coding and computing, 2004, p. 40409.
2. T. Auld, A.W. Moore, and S.F. Gull Bayesian neural networks for internet traffic classification IEEE Transactions on Neural Networks 18 1 2007 223 239
3. B. Caswell, J.C. Foster, R., J.B. Russell, and J. Posluns Snort 2.0 intrusion detection 2003 Syngress Press
4. DARPA. Intrusion Detection Evaluation, 1999. 〈 http://www.ll.mit. edu/IST/ideval/data/data-index.html 〉.
5. Heavens VX, 〈 http://vx.netlux.org/ 〉.
6. Hofman A, Horeis T, Sick B. Feature selection for intrusion detection: an evolutionary wrapper approach. In: Proceedings of the IEEE neural networks, vol. 2, 2004, p. 15638.
7. IP Traffic, 〈 http://www.omnicor.com/netest.htm 〉.
8. John H. Holland Adaptation in natural and artificial systems: an introductory analysis with applications to biology, control, and artificial intelligence 1992 The MIT Press
9. Kaspersky Lab, 〈 http://www.kaspersky.com/ 〉.
10. Lee C-H, Chung J-W, Shin S-W, Network intrusion detection through genetic feature selection. In: Proceedings of the IEEE conference on software engineering, artificial intelligence, networking, and parallel/distributed computing (SNPD), 2006, p. 10914.
11. S. Lekkas, and L. Mikhailov Towards the development of OMNIVOR: an evolving intelligent intrusion detection system Applications and innovations in intelligent systems XV 2007 Springer Press p. 303308
12. Y. Liao, and V.R. Vemuri Use of K-nearest neighbor classifier for intrusion detection Computers & Security 21 5 2002 439 448
13. Y. Linde, A. Buzo, and R. Gray An algorithm for vector quantizer design IEEE Transactions on Communications 28 1 1980 84 94
14. Middlemiss MJ, Dick G. Weighted feature extraction using a genetic algorithm for intrusion detection. In: Proceedings of the evolutionary computation, vol. 3, 2003, p. 166975.
15. Mukkamala S, Sung AH. Feature ranking and selection for intrusion detection using support vector machines. In: Proceedings of the conference on information and knowledge engineering, 2002, p. 5039.
16. Rosenberger C, Chehdi K. Unsupervised clustering method with optimal estimation of the number of cluster: application to image segmentation. In: Proceedings of the IEEE international conference on pattern recognition, 2000, p. 6569.
17. Stein G, Chen B, Wu AS, Hua KA. Decision tree classifier for network intrusion detection with Ga-based feature selection. In: Proceedings of the ACM southeast regional conference, vol. 2, 2005, p. 13641.
18. Sung AH, Mukkamala S. Identifying important features for intrusion detection using support vector machines and neural networks. In: Proceedings of the IEEE symposium on applications and the internet, 2003, p. 20916.
19. The UCI KDD Archive, 〈 http://kdd.ics.uci.edu/databases/kddcup99/ kddcup.names 〉.
20. C.-H. Tsang, S. Kwong, and H. Wang Genetic-fuzzy rule mining approach and evaluation of feature selection techniques for anomaly intrusion detection Pattern Recognition 40 9 2007 2373 2391
21. A.N. Toosj, and M. Kahani A new approach to intrusion detection based on an evolutionary soft computing model using neuro-fuzzy classifiers Computer Communications 30 10 2007 2201 2212
22. WinPcap. The Windows Packet Capture Library, 〈 http://www.winpcap. org/ 〉.