Unknown attacks detection using feature extraction from anomaly-based IDS alerts

Proceedings - 2012 IEEE/IPSJ 12th International Symposium on Applications and the Internet, SAINT 2012

Volumn , Issue , 2012, Pages 273-277

  Sato, Masaaki ^a   Yamaki, Hirofumi ^a   Takakura, Hiroki ^a  

^a NAGOYA UNIVERSITY   (Japan)

Author keywords

anomaly detection; intrusion detection system; unknown attacks

Indexed keywords

ANOMALY DETECTION; DATA SETS; DETECTION TECHNIQUE; INTRUSION DETECTION SYSTEMS; NETWORK TRAFFIC; UNKNOWN ATTACKS;

DATA PROCESSING; FEATURE EXTRACTION; INTERNET; INTRUSION DETECTION;

COMPUTER CRIME;

EID: 84867976535     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAINT.2012.51     Document Type: Conference Paper

References (7)

1. J. Song, H. Takakura, and Y. Kwon, "A generalized feature extraction scheme to detect 0-day attacks via ids alerts," in Applications and the Internet, 2008. SAINT 2008. International Symposium on. IEEE, 2008, pp. 55-61.
2. "Kyoto2006+ dataset," http://www.takakura.com/Kyoto-data/.
3. J. Song, H. Takakura, Y. Okabe, and Y. Kwon, "Unsupervised anomaly detection based on clustering and multiple one-class svm," IEICE transactions on communications, vol. 92, no. 6, pp. 1981-1990, 2009.
4. K. Kishimoto, H. Yamaki, and H. Takakura, "Improving performance of anomaly-based ids by combining multiple classifiers," in Applications and the Internet (SAINT), 2011 IEEE/IPSJ 11th International Symposium on. IEEE, 2011, pp. 366-371.
5. "The third international knowledge discovery and data mining tools competition dataset kdd99-cup," http://kdd.ics.uci.edu/databases/kddcup99/ kddcup99.html.
6. B. Schölkopf, J. Platt, J. Shawe-Taylor, A. Smola, and R. Williamson, "Estimating the support of a high-dimensional distribution," Neural computation, vol. 13, no. 7, pp. 1443-1471, 2001.
7. C. Chih-Chung and L. Chih-Jen, "Libsvm: a library for support vector machines," http://www.csie.ntu.edu.tw/~cjlin/libsvm/.