2005 · 31 citations · 11 references
ComputingCybersecurityData MiningMachine LearningTime Series AnalysisAnomaly DetectionCluster DetectionComputer IntrusionGenetic AlgorithmsIntrusion AnalysisIntrusion DetectionBehavioral PatternsCluster-based Anomaly DetectionEvolutionary SearchK-means ClusteringLocal OptimizationLocal SearchUnsupervised Anomaly DetectionUnsupervised Intrusion Detection
This paper presents a novel unsupervised fuzzy clustering method based on clonal selection algorithm for anomaly detection in order to solve the problem of fuzzy k-means algorithm which is much more sensitive to the initialization and easy to fall into local optimization. This method can quickly obtain the global optimal clustering with clonal operator which combines the evolutionary search, global search, stochastic search and local search. And then detect abnormal network behavioral patterns with fuzzy detection algorithm. Experimental results on the data set of KDD99 show that this method can detect unknown intrusions with lower time complexity and higher detection rate.
11
Towards a network theory of the immune system.
Jerne Nk · PubMed · 1974 · 3.4K citations
Life Sciences, Biology, Immunology +14
Intrusion detection with unlabeled data using clustering
Leonid Portnoy · Open MIND · 2000 · 757 citations · Full text
Bayesian event classification for intrusion detection
Christopher Kruegel, D. Mutz, William Robertson et al. · 2004 · 347 citations