Automatically building datasets of labeled IP traffic traces: A self-training approach

Applied Soft Computing Journal

Volumn 12, Issue 6, 2012, Pages 1640-1649

  Gargiulo, Francesco ^a   Mazzariello, Claudio ^a   Sansone, Carlo ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

IDS; Network security; Soft label

Indexed keywords

ADVERSARIAL ENVIRONMENTS; DATA SETS; HUMAN EXPERT; IDS; INTRUSION DETECTION SYSTEMS; IP TRAFFIC; MALICIOUS BEHAVIOR; NETWORK TRAFFIC; PATTERN RECOGNITION TECHNIQUES; PRIOR KNOWLEDGE; REAL ENVIRONMENTS; REAL TRAFFIC; SELF-TRAINING; TCPDUMP; TRAFFIC TRACES; TRAINING SETS; UNSUPERVISED ALGORITHMS;

PATTERN RECOGNITION;

NETWORK SECURITY;

EID: 84859602982     PISSN: 15684946     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.asoc.2012.02.012     Document Type: Article

References (29)

1. Meier M., Schmerl S., and Koenig H. Improving the efficiency of misuse detection Detection of Intrusions and Malware, and Vulnerability Assessment 2005 564
2. Beale J., and Foster J. Snort 2.0 Intrusion Detection 2003 Syngress Publishing, Inc. Rockland, MA 2003
3. Giacinto G., Roli F., and Didaci L. Fusion of multiple classifiers for intrusion detection in computer networks Pattern Recognition Letters 24 12 2003 1795 1803 (Pubitemid 36558001)
4. Zanero S. Analyzing tcp traffic patterns using self organizing maps Image Analysis and Processing-ICIAP 2005 2005 83 90 (Pubitemid 43901963)
5. Laskov P., Dussel P., Schafer C., and Rieck K. Learning intrusion detection: supervised or unsupervised? Image Analysis and Processing-ICIAP 2005 2005 50 57 (Pubitemid 43901959)
6. Markou M., and Singh S. Novelty detection: a review-part 2: neural network based approaches Signal Processing 83 12 2003 2499 2521
7. Elkan C. Results of the kdd'99 classifier learning ACM SIGKDD Explorations Newsletter 1 2 2000 63 64
8. Cordella L., and Sansone C. A multi-stage classification system for detecting intrusions in computer networks Pattern Analysis & Applications 10 2 2007 83 100
9. Finizio I., Mazzariello C., and Sansone C. Combining genetic-based misuse and anomaly detection for reliably detecting intrusions in computer networks Image Analysis and Processing-ICIAP 2005 2005 66 74 (Pubitemid 43901961)
10. Fugate M., and Gattiker J. Computer intrusion detection with classification and anomaly detection, using svms International Journal of Pattern Recognition and Artificial Intelligence 17 3 2003 441 458
11. Liu Y., Chen K., Liao X., and Zhang W. A genetic clustering method for intrusion detection Pattern Recognition 37 5 2004 927 942 (Pubitemid 38473836)
12. Zhang C., Jiang J., and Kamel M. Intrusion detection using hierarchical neural networks Pattern Recognition Letters 26 6 2005 779 791 (Pubitemid 40430497)
13. Mahoney M., and Chan P. An analysis of the 1999 darpa/lincoln laboratory evaluation data for network anomaly detection Recent Advances in Intrusion Detection 2003 Springer pp. 220-237 (Pubitemid 137633167)
14. Eskin E., Arnold A., Prerau M., Portnoy L., and Stolfo S. A geometric framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data Applications of Data Mining in Computer Security 2002 77 102
15. Gordon J., and Shortliffe E. The Dempster-Shafer theory of evidence Rule-Based Expert Systems: The MYCIN Experiments of the Stanford Heuristic Programming Project 1984 272 292
16. Gargiulo F., Mazzariello C., and Sansone C. 3 information fusion techniques for reliably training intrusion detection systems Progress in Pattern Recognition 2007 27
17. Chen T., and Venkataramanan V. Dempster-Shafer theory for intrusion detection in ad hoc networks IEEE Internet Computing 2005 35 41 (Pubitemid 43051366)
18. Yu D., and Frincke D. Alert confidence fusion in intrusion detection systems with extended Dempster-Shafer theory Proceedings of the 43rd Annual Southeast Regional Conference-Volume 2, ACM 2005 142 147
19. Herrera P., Dehamel A., and Gouyon F. Automatic labeling of unpitched percussion sounds Preprints-Audio Engineering Society 2003
20. Zhu X. Semi-supervised learning literature survey Computer Science 2006 University of Wisconsin-Madison
21. Kuncheva L. Switching between selection and fusion in combining classifiers: an experiment, Systems, Man, and Cybernetics, Part B: Cybernetics IEEE Transactions on 32 2 2002 146 156 (Pubitemid 34249373)
22. L.I. Kuncheva, J.C. Bezdek, R.P.W. Duin, Decision templates for multiple classifier fusion: an experimental comparison, Pattern Recognition 34 (2001) 299-314. (Pubitemid 32871876)
23. Xu L., Krzyzak A., and Suen C. Methods of combining multiple classifiers and their applications to handwriting recognition, Systems, Man and Cybernetics IEEE Transactions on 22 3 1992 418 435
24. Fawcett T. An introduction to roc analysis Pattern Recognition Letters 27 8 2006 861 874
25. McHugh J. Testing intrusion detection systems: a critique of the 1998 and 1999 darpa intrusion detection system evaluations as performed by lincoln laboratory ACM Transactions on Information and System Security 3 4 2000 262 294
26. LIBSVM, A Library for Support Vector Machines, 2001.
27. Esposito M., Mazzariello C., Oliviero F., Romano S., and Sansone C. Real time detection of novel attacks by means of data mining techniques Enterprise Information Systems VII 2006 197 204
28. Lee W., and Stolfo S. A framework for constructing features and models for intrusion detection systems ACM Transactions on Information and System Security (TISSEC) 3 4 2000 227 261
29. Cohen W., and Singer Y. A simple, fast, and effective rule learner Proceedings of the National Conference on Artificial Intelligence 1999 John Wiley & Sons Ltd. pp. 335-342