Combining Supervised and Unsupervised Learning for Automatic Attack Signature Generation System

作者: Lili Yang , Jie Wang , Ping Zhong

DOI: 10.1007/978-3-319-11197-1_47

关键词:

摘要: Signature-based intrusion detection system is currently used widely, but it dependent on high quality and complete attack signature database. Despite a great number of automatic feature extraction has been proposed, however, with the progress technology, generation research still an open problem. This paper presents novel combining supervised unsupervised learning for based transport layer network statistics feature, outputs sets in feedback way. Finally we demonstrate effectiveness model by using data from laboratory Darpa2000 datasets.

参考文章(9)
Matthew V. Mahoney, Philip K. Chan, An analysis of the 1999 DARPA/lincoln Laboratory evaluation data for network anomaly detection recent advances in intrusion detection. pp. 220- 237 ,(2003) , 10.1007/978-3-540-45248-5_13
Prakash Mandayam Comar, Lei Liu, Sabyasachi Saha, Pang-Ning Tan, Antonio Nucci, Combining supervised and unsupervised learning for zero-day malware detection 2013 Proceedings IEEE INFOCOM. pp. 2022- 2030 ,(2013) , 10.1109/INFCOM.2013.6567003
Christian Kreibich, Jon Crowcroft, Honeycomb: creating intrusion detection signatures using honeypots acm special interest group on data communication. ,vol. 34, pp. 51- 56 ,(2004) , 10.1145/972374.972384
Micheline Kamber, Jiawei Han, Jian Pei, Data Mining: Concepts and Techniques ,(2000)
Wang Yong-jun, Survey of automatic attack signature generation Journal of Communications. ,(2009)
Shu-Xiong Leung, Yue-Sheng Zhu, Sheng Chen, New fast adaptive algorithm for fast fading channel estimation Journal of Communications. ,vol. 30, pp. 96- 99 ,(2009)
Salvatore J. Stolfo, Gabriela Cretu, Ke Wang, Anomalous payload-based worm detection and signature generation Lecture Notes in Computer Science. pp. 227- 246 ,(2006)
Ke Wang, Gabriela Cretu, Salvatore J. Stolfo, Anomalous Payload-Based Worm Detection and Signature Generation Lecture Notes in Computer Science. pp. 227- 246 ,(2006) , 10.1007/11663812_12