dc.contributor.author | Jain, Ruchi | |
dc.contributor.author | Abouzakhar, Nasser | |
dc.date.accessioned | 2014-05-27T15:00:25Z | |
dc.date.available | 2014-05-27T15:00:25Z | |
dc.date.issued | 2012 | |
dc.identifier.citation | Jain , R & Abouzakhar , N 2012 , ' Hidden Markov Model Based Anomaly Intrusion Detection ' , Paper presented at The 7th International Conference for Internet Technology and Secured Transactions (ICITST-2012) , London , United Kingdom , 10/12/12 - 12/12/12 pp. 528-533 . | |
dc.identifier.citation | conference | |
dc.identifier.uri | http://hdl.handle.net/2299/13545 | |
dc.description.abstract | This paper aims to investigate and identify distinguishable TCP services, that comprise of both attack and normal types of TCP packets, using J48 decision tree algorithm. A predictive model capable of discriminating between normal and abnormal behavior of network traffic is developed by integrating Hidden Markov Model (HMM) technique with anomaly intrusion detection approach for each distinguishable TCP service. The model has been trained for each TCP session of the KDD Cup 1999 dataset using Baum-Welch training (BWT) and Viterbi training (VT) algorithms. Evaluation of the developed HMM model is performed using Forward and Backward algorithms. Results show that the proposed model is able to classify network traffic with approximately 76% to 99% accuracy. The overall performance of model is measured using standard evaluation method ROC curves. | en |
dc.format.extent | 6 | |
dc.format.extent | 1317789 | |
dc.language.iso | eng | |
dc.relation.ispartof | | |
dc.subject | Hidden Markov Model, Distinguishable TCP services, Anomaly intrusion detection | |
dc.title | Hidden Markov Model Based Anomaly Intrusion Detection | en |
dc.contributor.institution | School of Computer Science | |
dc.contributor.institution | Science & Technology Research Institute | |
dc.contributor.institution | Centre for Computer Science and Informatics Research | |
dc.description.status | Peer reviewed | |
rioxxterms.type | Other | |
herts.preservation.rarelyaccessed | true | |