NDLI: An application of principal component analysis to the detection and visualization of computer network attacks

Content Provider	Springer Nature Link
Author	Labib, Khaled Vemuri, V. Rao
Copyright Year	2006
Abstract	Network traffic data collected for intrusion analysis is typically high-dimensional making it difficult to both analyze and visualize. Principal Component Analysis is used to reduce the dimensionality of the feature vectors extracted from the data to enable simpler analysis and visualization of the traffic. Principal Component Analysis is applied to selected network attacks from theDarpa 1998 intrusion detection data sets namely: Denial-of-Service and Network Probe attacks. A method for identifying an attack based on the generated statistics is proposed. Visualization of network activity and possible intrusions is achieved using Bi-plots, which provides a summary of the statistics.Les données de trafic que l’on collecte lors d’intrusions dans des réseaux se caractérisent par leur côté multidimensionnel, ce qui les rend difficiles à analyser et à visualiser. L’analyse en composantes principales est ici utilisée pour réduire le nombre de dimensions des vecteurs extraits de ces données, ce qui rend plus simple l’analyse et la visualisation du trafic. Elle est appliquée à des attaques de réseaux prises dans les jeux de données de détection d’intrusion du DARPA 1998 à savoir : attaques par saturation (déni de service) et attaques par sonde. Une méthode d’identification de l’attaque basée sur des statistiques générales est proposée. La visualisation de l’activité du réseau et d’éventuelles intrusions est réalisée en utilisant des « bi-plots », qui fournissent un condensé de ces statistiques.
Starting Page	218
Ending Page	234
Page Count	17
File Format	PDF
ISSN	00034347
Journal	Annales Des Télécommunications
Volume Number	61
Issue Number	1-2
e-ISSN	19589395
Language	French
Publisher	Springer-Verlag
Publisher Date	2006-01-01
Publisher Place	Paris
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Sécurité informatique Détecteur intrus Analyse composante principale Analyse statistique Télétrafic Communications Engineering, Networks Information Systems and Communication Service Signal, Image and Speech Processing Computer Communication Networks Information and Communication, Circuits R & D/Technology Policy
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework

A flow-based approach to modeling ADSL traffic on an IP backbone link

Measurement-based simulation model for TCP over ATM

Bandwidth sharing with heterogeneous flow sizes

A countermeasure againstDDOS attacks using active networks technologies

SoCs security: a war against side-channels

Optimization study of a packet classification algorithm

One-time password-based high performance per-packet authentication for capsule networks

The professionalisation paths of hackers in IT security: The sociology of a divided identity

An application of principal component analysis to the detection and visualization of computer network attacks

Similar Documents

Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework

A flow-based approach to modeling ADSL traffic on an IP backbone link

Measurement-based simulation model for TCP over ATM

Bandwidth sharing with heterogeneous flow sizes

A countermeasure againstDDOS attacks using active networks technologies

SoCs security: a war against side-channels

Optimization study of a packet classification algorithm

One-time password-based high performance per-packet authentication for capsule networks

The professionalisation paths of hackers in IT security: The sociology of a divided identity

An application of principal component analysis to the detection and visualization of computer network attacks