2011 · 20 citations · 4 references
ComputingComputer ScienceCybersecurityComputer SecurityData MiningNetwork SecurityAnomaly DetectionCluster DetectionComputer IntrusionIntrusion DetectionOutlier DetectionCluster Analysis For GroupingCluster-based Anomaly DetectionCluster-based Outlier DetectionFalse Alarm Rate AnalysisFalse Alarm ReductionNetwork Intrusion DetectionUnsupervised ClusteringUnsupervised Intrusion Detection
Network intrusion detection system includes identifying a set of spiteful actions that compromises the basic security requirements such as integrity, confidentiality, and availability of information resources. The enormous increase in network attacks has made the data mining based intrusion detection techniques extremely useful in detecting the attacks. This paper describes a system that is able to detect the network intrusion using clustering concept. This unsupervised clustering technique for intrusion detection is used to group behaviors together depending on their similarity and to detect the different behaviors which are then grouped as outliers. Obviously, these outliers are attacks or intrusion attempts. This proposed method which uses data mining technique will reduce the false alarm rate and improves the security.
4
Data mining: concepts and techniques
Jiawei Han, Micheline Kamber · Choice Reviews Online · 2012 · 28.9K citations
Real time data mining-based intrusion detection
Wenke Lee, Salvatore J. Stolfo, Philip K. Chan et al. · 2002 · 252 citations
Data mining for network intrusion detection : How to get started
Eric Bloedorn · 2001 · 111 citations