Title
A Framework for Network Intrusion Detection Using Network Programmability and Data Stream Clustering Machine Learning Algorithms
Publication Date
9-26-2019
Document Type
Conference Proceeding
Abstract
Several operational security mechanisms have been developed to mitigate malicious activity in the Internet. However, the most these mechanisms require a signature basis and present the inability to predict new malicious activity. Other anomaly-based mechanisms are inefficient due to the possibility of an attacker simulates legitimate traffic, which causes many false alarms. Thus, to overcome that problem, in this paper we present an anomaly-based framework that uses network programmability and machine learning algorithms over continuous data stream. Our approach overcomes the main challenges that occur when develop an anomaly-based system using machine learning techniques. We have done an experimental evaluation to demonstrate the feasibility of the proposed framework. In the experiments, we use a DDoS attack as network intrusion and we show that the technique attains an Accuracy of 98.98%, a Recall of 60%, a Precision of 60% and an FPR of 0.48% for 1% DDoS attack on the real normal traffic. This shows the effectiveness of our technique.
Publication Title
2019 Federated Conference on Computer Science and Information Systems
First Page
57
Last Page
63
DOI
10.15439/2019F87
Open Access Status
Licensed
Recommended Citation
Ribeiro, A. de R. L., Ordonez, E. D. M., & Nascimento, A. C. A. (2019, September 26). A Framework for Network Intrusion Detection using Network Programmability and Data Stream Clustering Machine Learning Algorithms. 57–63. https://doi.org/10.15439/2019F87
