2016 · 12 citations · 6 references
ComputingComputer EngineeringComputer ScienceComputer SecurityData MiningMachine LearningComputer IntrusionDenial-of-service AttacksIntrusion DetectionNetwork Traffic AnalysisAccuracyMachine Learning For Intrusion DetectionMachine Learning For Traffic AnalysisNetwork Intrusion DetectionNetwork Traffic Anomaly DetectionSmurf AttacksSupervised Intrusion Detection
Attaining high prediction accuracy in detecting anomalies in network traffic is a major goal in designing machine learning algorithms and in building Intrusion Detection Systems. One of the major network attack classes is Denial of Service (DoS) attack class that contains various types of attacks such as Smurf, Teardrop, Land, Back and Neptune. This paper examines the detection accuracy of a set of selected machine learning algorithms in detecting different DoS attack class types. The algorithms are belonging to different supervised techniques, namely, PART, BayesNet, IBK, Logistic, J48, Random Committee and InputMapped. The experimental work is carried out using NSL-KDD dataset and WEKA as a data mining tool. The results show that the best algorithm in detecting the Smurf attack is the Random Committee with an accuracy of 98.6161%, and the best algorithm in detecting the Neptune attack is the PART algorithm with an accuracy of 98.5539%, and on the average PART algorithm is the best algorithm in detecting DoS attacks while InputMapped algorithm is the worst.
6
Cost-based modeling for fraud and intrusion detection: results from the JAM project
Salvatore J. Stolfo, Wei Fan, Wenke Lee et al. · 2002 · 611 citations · Full text
Mining in a data-flow environment
Wenke Lee, Salvatore J. Stolfo, Kui W. Mok · 1999 · 225 citations · Full text