ETRI-Knowledge Sharing Plaform

KOREAN
논문 검색
Type SCI
Year ~ Keyword

Detail

Conference Paper A Novel Anomaly Detection System based on HFR-MLR Method
Cited - time in scopus Share share facebook twitter linkedin kakaostory
Authors
Eunhye Kim, Sehun Kim
Issue Date
2013-07
Citation
International Conference on Ubiquitous Context-Awareness and Wireless Sensor Network (UCAWSN) 2013, pp.1-7
Language
English
Type
Conference Paper
Abstract
Reducing the data space and then classifying anomalies based on the reduced feature space is vital to real-time intrusion detection. In this study, a novel framework is developed for logistic regression-based anomaly detection and hierarchical feature reduction (HFR) to preprocess network traffic data before detection model training. The proposed dimensionality reduction algorithm optimally excludes the redundancy of features by considering the similarity of feature responses through a clustering analysis based on the feature space reduced by factor analysis, thus helping to rank the importance of input features (essential, secondary and insignificant) with low time complexity. Classification of anomalies over the reduced feature space is based on a multinomial logistic regression (MLR) model to detect multi-category attacks as an outcome with the goal of reinforcing detection efficiency. The proposed system not only achieves a significant detection performance, but also enables fast detection of multi-category attacks.
KSP Keywords
Clustering Analysis, Data space, Detection Systems(IDS), Detection efficiency, Detection model, Fast detection, Feature space, Input features, Multi-category, Multinomial logistic regression, Network Traffic Data