Networking anomaly detection using DSNS and particle swarm optimization with re-clustering

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2010, Pages

  Lima, Moisés F ^a   Sampaio, Lucas D H ^a   Zarpelão, Bruno B ^b   Rodrigues, Joel J P C ^c   Abrão, Taufik ^a   Proença Jr , Mario Lemes ^a  

^a STATE UNIVERSITY OF LONDRINA   (Brazil)

^b UNIVERSITY OF CAMPINAS   (Brazil)

^c UNIVERSITY OF BEIRA INTERIOR   (Portugal)

Author keywords

Anomaly detection; Baseline; DSNS; K means clustering algorithm; PSO

Indexed keywords

CLUSTERING ALGORITHMS; GENETIC ALGORITHMS; INFORMATION MANAGEMENT; PARTICLE SWARM OPTIMIZATION (PSO);

ANOMALY DETECTION; BASED CLUSTERING; BASELINE; DIGITAL SIGNATURE OF NETWORK SEGMENT; K-MEANS CLUSTERING ALGORITHMS; NETWORK SEGMENT; PARTICLE SWARM; PSO; REAL TRAFFIC; SWARM OPTIMIZATION;

SWARM INTELLIGENCE;

EID: 79551627252     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2010.5683910     Document Type: Conference Paper

References (16)

1. A. Kind, M. P. Stoecklin, and X. Dimitropoulos, "Histogram-based traffic anomaly detection," in IEEE Transactions on Network Service Management, vol. 6, no. 2, June 2009.
2. B. B. Zarpelão, L. S. Mendes, M. L. Proença Jr., and J. J. P. C. Rodrigues, "Parameterized anomaly detection system with automatic configuration," in GC'09 CSS. 2009 IEEE Global Communications Conference (IEEE GLOBECOM 2009), Communications Software and Services Symposium, 2009.
3. A. Patcha and J. M. Park, "An overview of anomaly detection techniques: Existing solutions and latest technological trends," Computer Networks: The International Journal of Computer and Telecommunications Networking, 2007.
4. M. L. Proença Jr., C. Coppelmans, M. Botolli, and L. S. Mendes, Security and reliability in information systems and networks: Baseline to help with network management. Springer, 2006, pp. 149-157.
5. J. Kennedy and R. Eberhart, "Particle swarm optimization," in IEEE International Conference on Neural Networks, 1995, pp. 1942-1948.
6. J. B. MacQueen, "Some methods for classification and analysis of multivariate observations," in Proceedings of the Fifth Berkeley Symposium on Mathematical Statistics and Probability, 1967, pp. 281-297.
7. Y. ling Zhang, Z. guo Han, and J. xia Ren, "A network anomaly detection method based on relative entropy theory," in Proceedings of the 2009 Second International Symposium on Electronic Commerce and Security, 2009, pp. 231-235.
8. L. Kuang and M. Zulkernine, "An anomaly intrusion detection method using the csi-knn algorithm," in Proceedings of the 2008 ACM symposium on Applied computing, 2008, pp. 921-926.
9. L. He, S. Yu, and M. Li, "Anomaly detection based on available bandwidth estimation," in Proceedings of the 2008 IFIP International Conference on Network and Parallel Computing, 2008, pp. 176-183.
10. R. Ensafi, S. Dehghanzadeh, R. Mohammad, and T. Akbarzadeh, "Optimizing fuzzy k-means for network anomaly detection using pso," in AICCSA 2008. IEEE/ACS International Conference on Computer Systems and Applications, Apr. 2008, pp. 686-693.
11. KDD Cup 1999 Data. Available at http://kdd.ics.uci.edu/databases/ kddcup99/kddcup99.html.
12. R. Ma, Y. Liu, X. Lin, and Z.Wang, "Network anomaly detection using rbf neural network with hybrid qpso," in IEEE International Conference on Networking, Sensing and Control, Apr. 2008, pp. 1284-1287.
13. L. Xiao, Z. Shao, and G. Liu, "K-means algorithm based on particle swarm optimization algorithm for anomaly intrusion detection," in WCICA 2006 . The Sixth World Congress on Intelligent Control and Automation, 2006, pp. 5854-5858.
14. N. Nedjah and L. M. Mourelle, Swarm Intelligent Systems. Springer-Verlag Berlin Heidelberg: Springer, 2006.
15. Y. Shi and R. C. Eberhart, "Parameter selection in particle swarm optimization," in 1998 Annual Conference on Evolutionary Programming, San Diego, USA, March 1998.
16. S. Axelsson, "The base-rate fallacy and the difficulty of intrusion detection," in ACM Transactions on Information and Systems Security 3, vol. 1, May 2000, pp. 186 - 205.