NDLI: A new intrusion detection system using support vector machines and hierarchical clustering

Please wait, while we are loading the content...

A new intrusion detection system using support vector machines and hierarchical clustering

Content Provider	Springer Nature Link
Author	Khan, Latifur Awad, Mamoun Thuraisingham, Bhavani
Copyright Year	2006
Abstract	Whenever an intrusion occurs, the security and value of a computer system is compromised. Network-based attacks make it difficult for legitimate users to access various network services by purposely occupying or sabotaging network resources and services. This can be done by sending large amounts of network traffic, exploiting well-known faults in networking services, and by overloading network hosts. Intrusion Detection attempts to detect computer attacks by examining various data records observed in processes on the network and it is split into two groups, anomaly detection systems and misuse detection systems. Anomaly detection is an attempt to search for malicious behavior that deviates from established normal patterns. Misuse detection is used to identify intrusions that match known attack scenarios. Our interest here is in anomaly detection and our proposed method is a scalable solution for detecting network-based anomalies. We use Support Vector Machines (SVM) for classification. The SVM is one of the most successful classification algorithms in the data mining area, but its long training time limits its use. This paper presents a study for enhancing the training time of SVM, specifically when dealing with large data sets, using hierarchical clustering analysis. We use the Dynamically Growing Self-Organizing Tree (DGSOT) algorithm for clustering because it has proved to overcome the drawbacks of traditional hierarchical clustering algorithms (e.g., hierarchical agglomerative clustering). Clustering analysis helps find the boundary points, which are the most qualified data points to train SVM, between two classes. We present a new approach of combination of SVM and DGSOT, which starts with an initial training set and expands it gradually using the clustering structure produced by the DGSOT algorithm. We compare our approach with the Rocchio Bundling technique and random selection in terms of accuracy loss and training time gain using a single benchmark real data set. We show that our proposed variations contribute significantly in improving the training process of SVM with high generalization accuracy and outperform the Rocchio Bundling technique.
Starting Page	507
Ending Page	521
Page Count	15
File Format	PDF
ISSN	10668888
Journal	The VLDB Journal
Volume Number	16
Issue Number	4
e-ISSN	0949877X
Language	English
Publisher	Springer-Verlag
Publisher Date	2006-08-31
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Database Management
Content Type	Text
Resource Type	Article
Subject	Information Systems Hardware and Architecture

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A supervised clustering algorithm for computer intrusion detection

Hierarchical clustering for OLAP: the CUBE File approach

Clustering web documents using hierarchical representation with multi-granularity

A Parallel Hardware Architecture for Real-Time Object Detection with Support Vector Machines

Intrusion detection model using machine learning algorithm on Big Data environment

Intrusion Detection by Ellipsoid Boundary

A probability approach to anomaly detection with twin support vector machines

Detecting anomalous access patterns in relational databases

Hierarchical Clustering Using One-Class Support Vector Machines

A new intrusion detection system using support vector machines and hierarchical clustering

Similar Documents

A supervised clustering algorithm for computer intrusion detection

Hierarchical clustering for OLAP: the CUBE File approach

Clustering web documents using hierarchical representation with multi-granularity

A Parallel Hardware Architecture for Real-Time Object Detection with Support Vector Machines

Intrusion detection model using machine learning algorithm on Big Data environment

Intrusion Detection by Ellipsoid Boundary

A probability approach to anomaly detection with twin support vector machines

Detecting anomalous access patterns in relational databases

Hierarchical Clustering Using One-Class Support Vector Machines

A new intrusion detection system using support vector machines and hierarchical clustering