UNADA: Unsupervised network anomaly detection using sub-space outliers ranking

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6640 LNCS, Issue PART 1, 2011, Pages 40-51

  Casas, Pedro ^a,b   Mazel, Johan ^a,b   Owezarski, Philippe ^a,b  

^a LAAS CNRS   (France)

^b INSA   (France)

Author keywords

Abnormality Ranking; Evidence Accumulation; Outliers Detection; Sub Space Clustering; Unsupervised Anomaly Detection

Indexed keywords

ABNORMALITY RANKING; EVIDENCE ACCUMULATION; OUTLIERS DETECTION; SUB-SPACES; UNSUPERVISED ANOMALY DETECTION; ABNORMALITY RANKINGS; SUB-SPACE CLUSTERING;

EXPERT SYSTEMS; STATISTICS;

COMPUTER CRIME;

EID: 79956035662     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-20757-0_4     Document Type: Conference Paper

References (17)

1. Barford, P., Kline, J., Plonka, D., Ron, A.: A Signal Analysis of Network Traffic Anomalies. In: Proc. ACM IMW (2002)
2. Lakhina, A., Crovella, M., Diot, C.: Diagnosing Network-Wide Traffic Anomalies. In: Proc. ACM SIGCOMM (2004)
3. Lakhina, A., Crovella, M., Diot, C.: Mining Anomalies Using Traffic Feature Distributions. In: Proc. ACM SIGCOMM (2005)
4. Soule, A., et al.: Combining Filtering and Statistical Methods for Anomaly Detection. In: Proc. ACM IMC (2005)
5. Krishnamurthy, B., et al.: Sketch-based Change Detection: Methods, Evaluation, and Applications. In: Proc. ACM IMC (2003)
6. Dewaele, G., et al.: Extracting Hidden Anomalies using Sketch and non Gaussian Multi-resolution Statistical Detection Procedures. In: Proc. LSAD (2007)
7. Jain, A.K.: Data Clustering: 50 Years Beyond K-Means. Pattern Recognition Letters 31(8), 651-666 (2010)
8. Parsons, L., et al.: Subspace Clustering for High Dimensional Data: a Review. ACM SIGKDD Expl. Newsletter 6(1), 90-105 (2004)
9. Portnoy, L., Eskin, E., Stolfo, S.: Intrusion Detection with Unlabeled Data Using Clustering. In: Proc. ACM DMSA Workshop (2001)
10. Eskin, E., et al.: A Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data. In: Applications of Data Mining in Computer Security. Kluwer Publishers, Dordrecht (2002)
11. Leung, K., Leckie, C.: Unsupervised Anomaly Detection in Network Intrusion Detection Using Clustering. In: Proc. ACSC 2005 (2005)
12. Fred, A., Jain, A.K.: Combining Multiple Clusterings Using Evidence Accumulation. IEEE Trans. Pattern Anal. and Machine Int. 27(6) (2005)
13. Ester, M., et al.: A Density-based Algorithm for Discovering Clusters in Large Spatial Databases with Noise. In: Proc. ACM SIGKDD (1996)
14. Williams, N., Zander, S., Armitage, G.: A Preliminary Performance Comparison of Five Machine Learning Algorithms for Practical IP Traffic Flow Classification. ACM SIGCOMM Computer Communication Review 36(5) (2006)
15. Fernandes, G., Owezarski, P.: Automated Classification of Network Traffic Anomalies. In: Chen, Y., Dimitriou, T.D., Zhou, J. (eds.) SecureComm 2009. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol. 19, pp. 91-100. Springer, Heidelberg (2009)
16. Cho, K., Mitsuya, K., Kato, A.: Traffic Data Repository at the WIDE Project. In: USENIX Annual Technical Conference (2000)
17. METROlogy for SECurity and QoS, http://laas.fr/METROSEC