NDLI: Anomaly Detection Using REONIT and Attack Confirmation by Neural Ensemble

Content Provider	IEEE Xplore Digital Library
Author	Kumar, P.A.R. Selvakumar, S.
Copyright Year	2011
Abstract	With the availability of the sophisticated vulnerability assessment tools that are publicly available on the Internet, information security breaches are on the rise every day. Existing techniques such as Misuse detection methods identify packets that match a known pattern or signature. However, these methods fail to detect unknown anomalies. Hence, anomaly detection methods were used to identify the traffic patterns that deviate from the modeled normal traffic behavior. The identified anomalies could be either an attack or normal traffic. The focus in this paper is to monitor the resources of remote server and to detect the malicious traffic. This led to two contributions in this paper. First is the design and implementation of Remote server monitoring (REONIT) tool and the second is the confirmation of attacks by neural ensemble. Local and remote server resources are monitored through REONIT. The REONIT has been implemented using the existing ideas and has the following components, viz., Authentication port let to monitor the distributed resources, Web Port let, which processes requests and generates dynamic content, RRD tool for data storage and visualization, XML for data representation in the form of graphs, and Message Alert, which warns the victim server if any eccentric traffic pattern occurs. REONIT tool was deployed in SSE Test bed* and the resources were monitored. The results were displayed as graphs. From the results, it is confirmed that the anomalous behavior and the high resource utilization observed in the display were due to attacks and not due to legitimate traffic.
Starting Page	197
Ending Page	201
File Size	900835
Page Count	5
File Format	PDF
ISBN	9781457720338
e-ISBN	9780769545875
DOI	10.1109/CICN.2011.39
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-10-07
Publisher Place	India
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Collaboration Ensemble of classifiers Web servers Virtual private networks Remote Server Monitoring Computer crime Monitoring Portals
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A collaborative intrusion detection system using log server and neural networks

Attack Characterization and Intrusion Detection using an Ensemble of Self-Organizing Maps

Attack Detection for Resource-Constrained Network Devices

Design of an Active Intrusion Monitor System

The load monitoring of Web server using mobile agent

Detection of NS Resource Record Based DNS Query Request Packet Traffic and SSH Dictionary Attack Activity

Reducing Attack Surface with VM-Based Phantom Server

Research on DoS Attack and Detection Programming

A slow read attack using cloud

Anomaly Detection Using REONIT and Attack Confirmation by Neural Ensemble

Similar Documents

A collaborative intrusion detection system using log server and neural networks

Attack Characterization and Intrusion Detection using an Ensemble of Self-Organizing Maps

Attack Detection for Resource-Constrained Network Devices

Design of an Active Intrusion Monitor System

The load monitoring of Web server using mobile agent

Detection of NS Resource Record Based DNS Query Request Packet Traffic and SSH Dictionary Attack Activity

Reducing Attack Surface with VM-Based Phantom Server

Research on DoS Attack and Detection Programming

A slow read attack using cloud

Anomaly Detection Using REONIT and Attack Confirmation by Neural Ensemble