Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Zhiyuan Tan; Aruna Jamdagni; Priyadarsi Nanda; Xiangjian He; Ren Ping Liu

doi:10.1145/2490428.2490450

Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Zhiyuan Tan, Aruna Jamdagni, Priyadarsi Nanda, Xiangjian He, Ren Ping Liu

School of Computer, Data & Mathematical Sciences

Research output: Chapter in Book / Conference Paper › Conference Paper › peer-review

1 Citation (Scopus)

Abstract

In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.

Original language	English
Title of host publication	Proceedings of the 1st International Conference on Security of Internet of Things, 17-19 August 2012, Kerala, India
Publisher	Amrita University
Number of pages	5
DOIs	https://doi.org/10.1145/2490428.2490450
Publication status	Published - 2012
Event	International Conference on Security of Internet of Things - Duration: 17 Aug 2012 → …

Conference

Conference	International Conference on Security of Internet of Things
Period	17/08/12 → …

Keywords

computer networks
denial-of-service attack
intrusion detection systems (computer security)
multivariate correlation analysis

Access to Document

10.1145/2490428.2490450

Cite this

@inproceedings{6d265c0bd899491ea02999bf0f9c91c5,

title = "Evaluation on multivariate correlation analysis based denial-of-service attack detection system",

abstract = "In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.",

keywords = "computer networks, denial-of-service attack, intrusion detection systems (computer security), multivariate correlation analysis",

author = "Zhiyuan Tan and Aruna Jamdagni and Priyadarsi Nanda and Xiangjian He and Liu, {Ren Ping}",

year = "2012",

doi = "10.1145/2490428.2490450",

language = "English",

booktitle = "Proceedings of the 1st International Conference on Security of Internet of Things, 17-19 August 2012, Kerala, India",

publisher = "Amrita University",

note = "International Conference on Security of Internet of Things ; Conference date: 17-08-2012",

}

Tan, Z, Jamdagni, A, Nanda, P, He, X & Liu, RP 2012, Evaluation on multivariate correlation analysis based denial-of-service attack detection system. in Proceedings of the 1st International Conference on Security of Internet of Things, 17-19 August 2012, Kerala, India. Amrita University, International Conference on Security of Internet of Things, 17/08/12. https://doi.org/10.1145/2490428.2490450

Evaluation on multivariate correlation analysis based denial-of-service attack detection system. / Tan, Zhiyuan; Jamdagni, Aruna; Nanda, Priyadarsi et al.
Proceedings of the 1st International Conference on Security of Internet of Things, 17-19 August 2012, Kerala, India. Amrita University, 2012.

Research output: Chapter in Book / Conference Paper › Conference Paper › peer-review

TY - GEN

T1 - Evaluation on multivariate correlation analysis based denial-of-service attack detection system

AU - Tan, Zhiyuan

AU - Jamdagni, Aruna

AU - Nanda, Priyadarsi

AU - He, Xiangjian

AU - Liu, Ren Ping

PY - 2012

Y1 - 2012

N2 - In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.

AB - In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.

KW - computer networks

KW - denial-of-service attack

KW - intrusion detection systems (computer security)

KW - multivariate correlation analysis

UR - http://handle.uws.edu.au:8081/1959.7/525298

UR - http://securit.ws/

U2 - 10.1145/2490428.2490450

DO - 10.1145/2490428.2490450

M3 - Conference Paper

BT - Proceedings of the 1st International Conference on Security of Internet of Things, 17-19 August 2012, Kerala, India

PB - Amrita University

T2 - International Conference on Security of Internet of Things

Y2 - 17 August 2012

ER -

Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this