A network-based internet worm intrusion detection and prevention system

Conference proceedings article

ผู้เขียน/บรรณาธิการ

กลุ่มสาขาการวิจัยเชิงกลยุทธ์

ไม่พบข้อมูลที่เกี่ยวข้อง

รายละเอียดสำหรับงานพิมพ์

รายชื่อผู้แต่ง: Wattanapongsakorn N., Wonghirunsombat E., Assawaniwed T., Hanchana V., Srakaew S., Charnsripinyo C.

ผู้เผยแพร่: Hindawi

ปีที่เผยแพร่ (ค.ศ.): 2013

ISBN: 9781479928453

นอก: 0146-9428

eISSN: 1745-4557

URL: https://www.scopus.com/inward/record.uri?eid=2-s2.0-84894187341&doi=10.1109%2fICITCS.2013.6717779&partnerID=40&md5=081565a519ce5e3a4ee55afd6a83b5e7

ภาษา: English-Great Britain (EN-GB)

ดูบนเว็บไซต์ของสำนักพิมพ์

บทคัดย่อ

Many incidents of network attacks and security threats have been previously reported. Damages caused by network attacks and malware tend to be high. In this paper, we present a network-based Intrusion Detection and Prevention System (IDPS), which can detect network attacks and Internet Worms. The proposed system can immediately classify network attack types (i.e. DoS, Probe) and Internet worm from normal network traffic by using traffic classification technique and selected well-known machine learning algorithms (i.e. Decision TreeC4.5, Random Forest, Ripple Rule, Bayesian Network, Back Propagation Neural Network) in both standalone mode and distributed mode. The proposed IDPS also allows system administrator to update existing rule sets or learn new trained data sets with a user-friendly graphic user interface. In our experiments, we can correctly detect and prevent network attacks with high accuracy, more than 99%. ฉ 2013 IEEE.

คำสำคัญ

Internet worm detection, Intrusion detection system, Machine learning technique, Network security system