Network anomaly detection using co-clustering

Proceedings of the 2012 IEEE/ACM International Conference on Advances in Social Networks Analysis and Mining, ASONAM 2012

Volumn , Issue , 2012, Pages 403-410

  Papalexakis, Evangelos E ^b   Beutel, Alex ^b   Steenkiste, Peter ^a,b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b Carnegie Mellon University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALOUS DETECTIONS; ANOMALY DETECTION; CO-CLUSTERING; DATA SET; FRAUDSTERS; INFORMATION AND COMMUNICATION; INTERNET ARCHITECTURE; INTERNET ATTACKS; INTERNET SECURITY; NETWORK ANOMALY DETECTION; SERVICE PROVIDER; SOCIAL NETWORKS; SPAMMERS; SYSTEM ADMINISTRATORS; UNSUPERVISED METHOD;

CLUSTERING ALGORITHMS; EXPERIMENTS; INTERNET; SOCIAL NETWORKING (ONLINE);

SECURITY OF DATA;

EID: 84874258387     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ASONAM.2012.72     Document Type: Conference Paper

References (27)

1. Bregman co-clustering code on-line. http://www.lans.ece.utexas.edu/ facility.html.
2. Google hack attack was ultra sophisticated, new details show. http://www.wired.com/threatlevel/2010/01/operation-aurora/.
3. K-means algorithm, wikipedia. http://en.wikipedia.org/wiki/K- meansclustering.
4. Kdd 99 cup dataset. http://kdd.ics.uci.edu/databases/kddcup99/kddcup99. html.
5. Smr co-clustering code on-line. http://www.models.life.ku.dk/cocluster.
6. Twitter restores service after attack. http://bits.blogs.nytimes.com/ 2009/08/06/twitter-overwhelmed-by-web-attack/.
7. L. Akoglu, M. McGlohon, and C. Faloutsos. Oddball: Spotting anomalies in weighted graphs. Advances in Knowledge Discovery and Data Mining, pages 410-421, 2010.
8. A. Banerjee, I. Dhillon, J. Ghosh, S. Merugu, and D.S. Modha. A generalized maximum entropy approach to bregman co-clustering and matrix approximation. In Proceedings of the tenth ACM SIGKDD international conference on Knowledge discovery and data mining, pages 509-514. ACM, 2004.
9. H. Cho, I.S. Dhillon, Y. Guan, and S. Sra. Minimum sum-squared residue co-clustering of gene expression data. In Proceedings of the fourth SIAM international conference on data mining, volume 114, 2004.
10. I.S. Dhillon. Co-clustering documents and words using bipartite spectral graph partitioning. In Proceedings of the seventh ACM SIGKDD international conference on Knowledge discovery and data mining, pages 269-274. ACM, 2001.
11. I.S. Dhillon, S. Mallela, and D.S. Modha. Information-theoretic coclustering. In Proceedings of the ninth ACM SIGKDD international conference on Knowledge discovery and data mining, pages 89-98. ACM, 2003.
12. Charles Elkan. Results of the kdd'99 classifier learning contest. http://cseweb.ucsd.edu/∼elkan/clresults.html.
13. G. Gu, R. Perdisci, J. Zhang, and W. Lee. Botminer: Clustering analysis of network traffic for protocol-and structure-independent botnet detection. In Proceedings of the 17th conference on Security symposium, pages 139-154. USENIX Association, 2008.
14. Y. Guan, A.A. Ghorbani, N. Belacel, et al. Y-means: A clustering method for intrusion detection. 2003.
15. K. Henderson, T. Eliassi-Rad, C. Faloutsos, L. Akoglu, L. Li, K. Maruhashi, B.A. Prakash, and H. Tong. Metric forensics: a multilevel approach for mining volatile graphs. In Proceedings of the 16th ACM SIGKDD international conference on Knowledge discovery and data mining, pages 163-172. ACM, 2010.
16. P. Kabiri and G.R. Zargar. Category-based selection of effective parameters for intrusion detection. International Journal of Computer Science and Network Security (IJCSNS), 9(9):181-188, 2009.
17. K. Leung and C. Leckie. Unsupervised anomaly detection in network intrusion detection using clusters. In Proceedings of the Twenty-eighth Australasian conference on Computer Science-Volume 38, pages 333- 342. Australian Computer Society, Inc., 2005.
18. K. Maruhashi, F. Guo, and C. Faloutsos. Multiaspectforensics: Pattern mining on large-scale heterogeneous networks with tensor analysis. In Proceedings of the Third International Conference on Advances in Social Network Analysis and Mining, 2011.
19. David Moore, Geoffrey Voelker, and Stefan Savage. Inferring internet denial-of-service activity. In In Proceedings of the 10th Usenix Security Symposium, pages 9-22, 2001.
20. B. Mukherjee, L.T. Heberlein, and K.N. Levitt. Network intrusion detection. Network, IEEE, 8(3):26-41, 1994.
21. E.E. Papalexakis and N.D. Sidiropoulos. Co-clustering as multilinear decomposition with sparse latent factors. In Acoustics, Speech and Signal Processing (ICASSP), 2011 IEEE International Conference on, pages 2064-2067. IEEE, 2011.
22. E.E. Papalexakis, N.D. Sidiropoulos, and M.N. Garofalakis. Reviewer profiling using sparse matrix regression. In Data Mining Workshops (ICDMW), 2010 IEEE International Conference on, pages 1214-1219. IEEE, 2010.
23. A. Patcha and J.M. Park. An overview of anomaly detection techniques: Existing solutions and latest technological trends. Computer Networks, 51(12):3448-3470, 2007.
24. Bernhard Pfahringer. Winning the kdd99 classication cup: Bagged boosting. http://www.sigkdd.org/explorations/issues/1-2-2000-01/pfahringer.pdf.
25. L. Portnoy, E. Eskin, and S. Stolfo. Intrusion detection with unlabeled data using clustering. In In Proceedings of ACM CSS Workshop on Data Mining Applied to Security (DMSA-2001. Citeseer, 2001.
26. H. Shah, J. Undercoffer, and A. Joshi. Fuzzy clustering for intrusion detection. In Fuzzy Systems, 2003. FUZZ'03. The 12th IEEE International Conference on, volume 2, pages 1274-1278. IEEE, 2003.
27. R. Tibshirani. Regression shrinkage and selection via the lasso. Journal of the Royal Statistical Society. Series B (Methodological), pages 267- 288, 1996.