Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Zhiyuan Tan; Aruna Jamdagni; Priyadarsi Nanda; Xiangjian He; Ren Ping Liu

doi:10.1145/2490428.2490450

Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Zhiyuan Tan, Aruna Jamdagni, Priyadarsi Nanda, Xiangjian He, Ren Ping Liu

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution

1 Citation (Scopus)

Abstract

In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.

Original language	English
Title of host publication	SecurIT 2012
Subtitle of host publication	Proceedings of the First International Conference on Security of Internet of Things
Place of Publication	New York
Publisher	Association for Computing Machinery
Pages	160-164
Number of pages	5
ISBN (Print)	9781450318228
DOIs	https://doi.org/10.1145/2490428.2490450
Publication status	Published - 2012
Externally published	Yes
Event	1st International Conference on Security of Internet of Things, SecurIT 2012 - Kerala, India Duration: 17 Aug 2012 → 19 Aug 2012

Other

Other	1st International Conference on Security of Internet of Things, SecurIT 2012
Country/Territory	India
City	Kerala
Period	17/08/12 → 19/08/12

Keywords

Denial-of-Service attack
Euclidean distance
Multivariate correlations
Network traffic characterization

Access to Document

10.1145/2490428.2490450

Cite this

@inproceedings{bebf0ce78b97468785376ce11f16ef25,

title = "Evaluation on multivariate correlation analysis based denial-of-service attack detection system",

abstract = "In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.",

keywords = "Denial-of-Service attack, Euclidean distance, Multivariate correlations, Network traffic characterization",

author = "Zhiyuan Tan and Aruna Jamdagni and Priyadarsi Nanda and Xiangjian He and Liu, {Ren Ping}",

year = "2012",

doi = "10.1145/2490428.2490450",

language = "English",

isbn = "9781450318228",

pages = "160--164",

booktitle = "SecurIT 2012",

publisher = "Association for Computing Machinery",

note = "1st International Conference on Security of Internet of Things, SecurIT 2012 ; Conference date: 17-08-2012 Through 19-08-2012",

}

Tan, Z, Jamdagni, A, Nanda, P, He, X & Liu, RP 2012, Evaluation on multivariate correlation analysis based denial-of-service attack detection system. in SecurIT 2012: Proceedings of the First International Conference on Security of Internet of Things. Association for Computing Machinery, New York, pp. 160-164, 1st International Conference on Security of Internet of Things, SecurIT 2012, Kerala, India, 17/08/12. https://doi.org/10.1145/2490428.2490450

Evaluation on multivariate correlation analysis based denial-of-service attack detection system. / Tan, Zhiyuan; Jamdagni, Aruna; Nanda, Priyadarsi et al.
SecurIT 2012: Proceedings of the First International Conference on Security of Internet of Things. New York: Association for Computing Machinery, 2012. p. 160-164.

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution

TY - GEN

T1 - Evaluation on multivariate correlation analysis based denial-of-service attack detection system

AU - Tan, Zhiyuan

AU - Jamdagni, Aruna

AU - Nanda, Priyadarsi

AU - He, Xiangjian

AU - Liu, Ren Ping

PY - 2012

Y1 - 2012

N2 - In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.

AB - In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems.

KW - Denial-of-Service attack

KW - Euclidean distance

KW - Multivariate correlations

KW - Network traffic characterization

UR - http://www.scopus.com/inward/record.url?scp=84879820964&partnerID=8YFLogxK

U2 - 10.1145/2490428.2490450

DO - 10.1145/2490428.2490450

M3 - Conference proceeding contribution

AN - SCOPUS:84879820964

SN - 9781450318228

SP - 160

EP - 164

BT - SecurIT 2012

PB - Association for Computing Machinery

CY - New York

T2 - 1st International Conference on Security of Internet of Things, SecurIT 2012

Y2 - 17 August 2012 through 19 August 2012

ER -

Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Abstract

Other

Keywords

Access to Document

Other files and links

Fingerprint

Cite this