Anomaly-based Network Intrusion Detection Methods

• Main Authors: Pavel Nevlud, Miroslav Bures, Lukas Kapicak, Jaroslav Zdralek
• Format: Article
• Language: English
• Published: VSB-Technical University of Ostrava 2013-01-01
• Series: Advances in Electrical and Electronic Engineering
• Subjects: anomaly-based detection; attack; bayesian networks; weka.
• Online Access: http://advances.utc.sk/index.php/AEEE/article/view/877

The article deals with detection of network anomalies. Network anomalies include everything that is quite different from the normal operation. For detection of anomalies were used machine learning systems. Machine learning can be considered as a support or a limited type of artificial intelligence. A machine learning system usually starts with some knowledge and a corresponding knowledge organization so that it can interpret, analyse, and test the knowledge acquired. There are several machine learning techniques available. We tested Decision tree learning and Bayesian networks. The open source data-mining framework WEKA was the tool we used for testing the classify, cluster, association algorithms and for visualization of our results. The WEKA is a collection of machine learning algorithms for data mining tasks.