DANAK: Finding the odd! - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

DANAK: Finding the odd!

Résumé

With the growth of network connectivity and network sizes, the interest in traffic classification respectively attack and anomaly detection in network monitoring and security related activities have become very strong. In this paper, a new tool called DANAK has been developed for the detection of anomalies in Netflow records by referring to spatial and temporal information aggregation in combination with Machine Learning techniques. Spatially aggregated Netflow records are fed in a new designed kernel function in order to analyze Netflow records on context and quantitative information. To strengthen the analysis of large volumes of Netflow records, support vector machines are applied. The proposed method has been validated by extensive experimentation on real data sets, including numerous attack strategies of different roots.
Fichier principal
Vignette du fichier
danak.pdf (692.16 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00641826 , version 1 (16-11-2011)

Identifiants

Citer

Cynthia Wagner, Jérôme François, Radu State, Thomas Engel. DANAK: Finding the odd!. 5th International Conference on Network and System Security, Sep 2011, Milan, Italy. ⟨10.1109/ICNSS.2011.6059996⟩. ⟨hal-00641826⟩
83 Consultations
264 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More