Clustering NGN user behavior for anomaly detection

Information Security Technical Report

Volumn 16, Issue 1, 2011, Pages 20-28

  Mazzariello, Claudio ^a   De Lutiis, Paolo ^b   Lombardo, Dario ^b  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^b TELECOM ITALIA   (Italy)

Author keywords

NGN security; User behavior modeling; User behavior monitoring

Indexed keywords

ACADEMIC RESEARCH; ANOMALY DETECTION; NETWORK CONNECTIVITY; NGN SECURITY; SECURITY AND PRIVACY; USER BEHAVIOR MODELING; USER BEHAVIORS;

INTERNET SERVICE PROVIDERS; NETWORK SECURITY; QUALITY OF SERVICE; RESEARCH; TELECOMMUNICATION NETWORKS;

BEHAVIORAL RESEARCH;

EID: 80052786412     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2010.10.011     Document Type: Article

References (24)

1. Yan Bai, Xiao Su, and B. Bhargava Detection and filtering spam over internet telephony - a user-behavior-aware intermediate-network-based approach 2009 726 729 Multimedia and Expo, 2009. ICME 2009. IEEE International Conference on
2. V. Balasubramaniyan, M. Ahamad, and H. Park CallRank, combating SPIT using call duration, social networking and global reputation 2007 Fourth Conference on Email and AntiSpam
3. R. Dantu, and P. Kolan Detecting spam in VoIP networks 2005 USENIX Association Berkeley, CA Proceedings of the Steps To Reducing Unwanted Traffic on the internet Workshop (Cambridge, MA)
4. P. De Lutiis, and D. Lombardo An innovative way to analyze large ISP data for IMS security and monitoring Intelligence in Next Generation Networks, ICIN 2009. 13th International Conference on 26-29 October 2009 10.1109/ICIN.2009. 5357065 pp. 1-6
5. P. Foggia, G. Percannella, C. Sansone, and M. Vento Benchmarking graph-based clustering algorithms 7th IAPR- TC15 Workshop on Graph-based Representations (GbR 2007) Image and Vision Computing 27 Issue 7 4 June 2009 979 988 ISSN 0262-8856
6. J.Dj. Golic Moving dispersion method for statistical anomaly detection in intrusion detection systems ISC International Journal of Information Security 1 no. 2 July 2009 3 22
7. A. Karygiannis, E. Antonakakis, and A. Apostolopoulos Host-based network monitoring tools for MANETs October 2006 Proceedings of the 3rd ACM international Workshop on Performance Evaluation of Wireless Ad Hoc, Sensor and Ubiquitous Networks, Terromolinos, Spain
8. J.E. Katz, and R.E. Rice Social consequences of internet use - access, involvement, and interaction September 2002 MIT Press ISBN-10: 0-262-11269-8, ISBN-13: 978-0-262-11269-7
9. A.D. Keromytis A survey of voice over IP security research Proceedings of the 5th International Conference on Information Systems Security (ICISS '09) Atul Prakash, Indranil Sen Gupta, 2009 Springer-Verlag Berlin, Heidelberg 1 17
10. A.D. Keromytis Voice-over-IP security: research and practice IEEE Security and Privacy March/April, 2010 76 78
11. T. Kohonen The self-organizing map Proceedings of the IEEE 78 no. 9 September 1990 1464 1480
12. L.I. Kuncheva Combining pattern classifiers: methods and algorithms 2004 Wiley-Interscience
13. W. Lee, and S.J. Stolfo A framework for constructing features and models for intrusion detection systems ACM Transactions on Information Systems Security 3 4 2000 227 261
14. S. Moyer, and A. Umar The impact of network convergence on telecommunications software Communications Magazine IEEE 39 no. 1 Jan 2001 78 84 10.1109/35.894380 (Pubitemid 32169379)
15. B. Mukherjee, L.T. Heberlein, and K.N. Levitt Network intrusion detection IEEE Network Magazine 8 3 May/June 1994 26 41
16. M. Nassar, R. State, and O. Festor VoIP malware: attack tool & attack scenarios 14-18 June 2009 ICC '09, IEEE International Conference on Communications, pp. 1-6
17. NGN working definition by ITU-T http://www.itu.int/ITU-T/studygroups/ com13/ngn2004/working-definition.html
18. J. Quittek, S. Niccolini, S. Tartarelli, and R. Schlegel On Spam Over Internet Telephony (SPIT) prevention Communications Magazine IEEE 46 no. 8 August 2008 80 86
19. S.L. Scott A Bayesian paradigm for designing intrusion detection systems Computational Statistics and Data Analysis Journal 45 1 2004 69 83 (Pubitemid 38188003)
20. A. Stotz, and M. Sudit INformation Fusion Engine for Real-time Decision-making (INFERD): a perceptual system for cyber attack tracking 2007 Proceedings of the 10th IEEE International Conference on Information Fusion, pp. 1-8
21. U. von Luxburg, S. Bubeck, S. Jegelka, and M. Kaufmann Nearest neighbor clustering Annals of Statistics 9 no. 1 1981 135 140
22. M. Wanli, D. Tran, and D. Sharma A study on the feature selection of network traffic for intrusion detection purpose 17-20 June 2008 Proceedings of the IEEE International Conference on Intelligence and Security Informatics, pp. 245-247
23. Yu-Sung Wu, S. Bagchi, N. Singh, and R. Wita Spam detection in voice-over-IP calls through semi-supervised clustering Dependable Systems & Networks 2009 307 316 DSN '09. IEEE/IFIP International Conference on
24. Jonathan Zar VoIP security and privacy threat taxonomy VoIP Security Alliance 2005