Evaluation on multivariate correlation analysis based denial-of-service attack detection system

Tan, Zhiyuan; Jamdagni, Aruna; Nanda, Priyadarsi; He, Xiangjian; Liu, Ren Ping

Abstract

In this paper, a Denial-of-Service (DoS) attack detection system is explored, where a multivariate correlation analysis technique based on Euclidean distance is applied for network traffic characterization and the principal of anomaly-based detection is employed in attack recognition. The effectiveness of the detection system is evaluated on the KDD Cup 99 dataset and the influence of data normalization on the performance of attack detection is analyzed in this paper as well. The evaluation results and comparisons prove that the detection system is effective in distinguishing DoS attack network traffic from legitimate network traffic and outperforms two state-of-the-art systems

Citation

Tan, Z., Jamdagni, A., Nanda, P., He, X., & Liu, R. P. (2012, August). Evaluation on multivariate correlation analysis based denial-of-service attack detection system. Presented at Proceedings of the First International Conference on Security of Internet of Things - SecurIT '12, Kollam, India

• Presentation Conference Type: Conference Paper (published)
• Conference Name: Proceedings of the First International Conference on Security of Internet of Things - SecurIT '12
• Start Date: Aug 17, 2012
• End Date: Aug 19, 2012
• Online Publication Date: Aug 17, 2012
• Publication Date: 2012
• Deposit Date: Jun 16, 2017
• Publisher: Association for Computing Machinery (ACM)
• Pages: 160-164
• Book Title: SecurIT '12 Proceedings of the First International Conference on Security of Internet of Things
• Chapter Number: NA
• ISBN: 9781450318228
• DOI: https://doi.org/10.1145/2490428.2490450
• Keywords: multivariate correlations, network traffic characterization, denial-of-service attack, euclidean distance
• Public URL: http://researchrepository.napier.ac.uk/Output/948368