The week's pick
Reseach Article
Network Anomaly Detection using PSO-ANN
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 77 - Number 2 |
| Year of Publication: 2013 |
| Authors: Diptam Dutta, Kaustav Choudhury |
10.5120/13368-0968
|
Diptam Dutta, Kaustav Choudhury . Network Anomaly Detection using PSO-ANN. International Journal of Computer Applications. 77, 2 ( September 2013), 35-42. DOI=10.5120/13368-0968
Abstract
In this work, the continue from the last research work done [20], thus it is proposed a data mining based anomaly detection system, aiming to detect volume anomalies, using Simple Network Management Protocol (SNMP) monitoring. The method is novel in terms of combining the use of Digital Signature of Network Segment (DSNS) with the evolutionary technique called Particle Swarm Optimization (PSO)[5] and neural network training, applied in a real data set. PSO is a high efficient heuristic technique with low computational complexity, developed in 1995 by Kennedy and Eberhart [1] inspired by social behavior of bird flocking. The DSNS is a baseline that consists of different normal behavior profiles to a specific network device or segment, generated by the GBA tool (Automatic Backbone Management), using data collected from SNMP objects. The proposed anomaly detection system uses the SVM in order to clusterize the traffic collected by SNMP agents and its respective DSNS. The PSO is combined with the SVM in order to improve performance and quality of the solution in the clusterization and calculation of clusters centroids. Tests were carried out using a real network environment in the Techno India University, Kolkata. Numerical results have been shown that the obtained detection and false alarm rates are promising. It is also implemented the deterministic method proposed in order to detect anomalies on the same dataset, so that both methods could be compared.
References
- A. Kind, M. P. Stoecklin, and X. Dimitropoulos, "Histogram-based traffic anomaly detection," in IEEE Transactions on Network Service Management, vol. 6, no. 2, June 2009.
- B. B. Zarpel˜ao, L. S. Mendes, M. L. Proenc¸a Jr. , and J. J. P. C. Rodrigues, "Parameterized anomaly detection system with automatic configuration," in GC'09 CSS. 2009 IEEE Global Communications Conference (IEEE GLOBECOM 2009), Communications Software and Services Symposium, 2009.
- A. Patcha and J. M. Park, "An overview of anomaly detection techniques: Existing solutions and latest technological trends," Computer Networks: The International Journal of Computer and Telecommunications Networking, 2007.
- M. L. Proenc¸a Jr. , C. Coppelmans, M. Botolli, and L. S. Mendes, Security and reliability in information systems and networks: Baseline to help with network management. Springer, 2006, pp. 149–157.
- J. Kennedy and R. Eberhart, "Particle swarm optimization," in IEEE International Conference on Neural Networks, 1995, pp. 1942–1948.
- J. B. MacQueen, "Some methods for classification and analysis of multivariate observations," in Proceedings of the Fifth Berkeley Symposium on Mathematical Statistics and Probability, 1967, pp. 281–297.
- Y. ling Zhang, Z. guo Han, and J. xia Ren, "A network anomaly detection method based on relative entropy theory," in Proceedings of the 2009 Second International Symposium on Electronic Commerce and Security, 2009, pp. 231 – 235.
- L. Kuang and M. Zulkernine, "An anomaly intrusion detection method using the csi-knn algorithm," in Proceedings of the 2008 ACM symposium on Applied computing, 2008, pp. 921 – 926.
- L. He, S. Yu, and M. Li, "Anomaly detection based on available bandwidth estimation," in Proceedings of the 2008 IFIP International Conference on Network and Parallel Computing, 2008, pp. 176 – 183
- R. Ensafi, S. Dehghanzadeh, R. Mohammad, and T. Akbarzadeh, "Optimizing fuzzy k-means for network anomaly detection using pso," in AICCSA 2008. IEEE/ACS International Conference on Computer Systems and Applications, Apr. 2008, pp. 686 – 693.
- KDD Cup 1999 Data. Available at http://kdd. ics. uci. edu/databases/kddcup99/kddcup99. html.
- R. Ma, Y. Liu, X. Lin, and Z. Wang, "Network anomaly detection using rbf neural network with hybrid qpso," in IEEE International Conference on Networking, Sensing and Control, Apr. 2008, pp. 1284 – 1287.
- L. Xiao, Z. Shao, and G. Liu, "K-means algorithm based on particle swarm optimization algorithm for anomaly intrusion detection," in WCICA 2006 . The Sixth World Congress on Intelligent Control and Automation, 2006, pp. 5854 – 5858.
- N. Nedjah and L. M. Mourelle, Swarm Intelligent Systems. Springer- Verlag Berlin Heidelberg: Springer, 2006.
- Y. Shi and R. C. Eberhart, "Parameter selection in particle swarm optimization," in 1998 Annual Conference on Evolutionary Programming, San Diego, USA, March 1998.
- S. Axelsson, "The base-rate fallacy and the difficulty of intrusion detection," in ACM Transactions on Information and Systems Security 3, vol. 1, May 2000, pp. 186 – 205.
- Kennedy, J. ; Eberhart, R. (1995). "Particle Swarm Optimization". Proceedings of IEEE International Conference on Neural Networks.
- Kennedy, J. ; Eberhart, R. C. (2001). Swarm Intelligence. Morgan Kaufmann.
- Poli, R. (2008). "Analysis of the publications on the applications of particle swarm optimisation". Journal of Artificial Evolution and Applications 2008.
- Argha Roy, Diptam Dutta, Kaustav Choudhury. "Training Artificial Neural Network using Particle Swarm Optimization Algorithm", International Journal of Advanced Research in Computer Science and Software Engineering, Volume 3, Issue 3, March-2013.
- Dipankar Dasgupta, "Artificial Immune Systems and Their Applications", 1993, Springer-Verlag Berlin HeiEnlberg.
Index Terms
Keywords