A network-based internet worm intrusion detection and prevention system

Conference proceedings article

Authors/Editors

Strategic Research Themes

No matching items found.

Publication Details

Author list: Wattanapongsakorn N., Wonghirunsombat E., Assawaniwed T., Hanchana V., Srakaew S., Charnsripinyo C.

Publisher: Hindawi

Publication year: 2013

ISBN: 9781479928453

ISSN: 0146-9428

eISSN: 1745-4557

URL: https://www.scopus.com/inward/record.uri?eid=2-s2.0-84894187341&doi=10.1109%2fICITCS.2013.6717779&partnerID=40&md5=081565a519ce5e3a4ee55afd6a83b5e7

Languages: English-Great Britain (EN-GB)

View on publisher site

Abstract

Many incidents of network attacks and security threats have been previously reported. Damages caused by network attacks and malware tend to be high. In this paper, we present a network-based Intrusion Detection and Prevention System (IDPS), which can detect network attacks and Internet Worms. The proposed system can immediately classify network attack types (i.e. DoS, Probe) and Internet worm from normal network traffic by using traffic classification technique and selected well-known machine learning algorithms (i.e. Decision TreeC4.5, Random Forest, Ripple Rule, Bayesian Network, Back Propagation Neural Network) in both standalone mode and distributed mode. The proposed IDPS also allows system administrator to update existing rule sets or learn new trained data sets with a user-friendly graphic user interface. In our experiments, we can correctly detect and prevent network attacks with high accuracy, more than 99%. ฉ 2013 IEEE.

Keywords

Internet worm detection, Intrusion detection system, Machine learning technique, Network security system