Skip to Main content Skip to Navigation
Conference papers

Detecting Advanced Network Threats Using a Similarity Search

Abstract : In this paper, we propose a novel approach for the detection of advanced network threats. We combine knowledge-based detections with similarity search techniques commonly utilized for automated image annotation. This unique combination could provide effective detection of common network anomalies together with their unknown variants. In addition, it offers a similar approach to network data analysis as a security analyst does. Our research is focused on understanding the similarity of anomalies in network traffic and their representation within complex behaviour patterns. This will lead to a proposal of a system for the real-time analysis of network data based on similarity. This goal should be achieved within a period of three years as a part of a PhD thesis.
Complete list of metadatas

Cited literature [12 references]  Display  Hide  Download

https://hal.inria.fr/hal-01632739
Contributor : Hal Ifip <>
Submitted on : Friday, November 10, 2017 - 3:27:27 PM
Last modification on : Friday, November 10, 2017 - 3:31:18 PM
Long-term archiving on: : Sunday, February 11, 2018 - 3:00:35 PM

File

385745_1_En_14_Chapter.pdf
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Milan Čermák, Pavel Čeleda. Detecting Advanced Network Threats Using a Similarity Search. 10th IFIP International Conference on Autonomous Infrastructure, Management and Security (AIMS), Jun 2016, Munich, Germany. pp.137-141, ⟨10.1007/978-3-319-39814-3_14⟩. ⟨hal-01632739⟩

Share

Metrics

Record views

55

Files downloads

134