Back close

Adsvm: Pre-processor plug-in using support vector machine algorithm for snort

Publication Type : Conference Paper

Thematic Areas : Amrita Center for Cybersecurity Systems and Networks

Publisher : ACM International Conference Proceeding Series

Source : ACM International Conference Proceeding Series, Kerala, p.179-184 (2012)

Url : http://www.scopus.com/inward/record.url?eid=2-s2.0-84879830238&partnerID=40&md5=2bb8e302f32b0f81328a7cd347675810

ISBN : 9781450318228

Keywords : Abnormal behavior, Anomaly detection, Anomaly detection systems, Application area, Critical problems, Data set, Internet, Intrusion detection, Learning algorithms, Snort, Support vector machine algorithm, Support vector machines

Campus : Amritapuri

School : Centre for Cybersecurity Systems and Networks, Department of Computer Science and Engineering, School of Engineering

Center : Cyber Security

Department : Computer Science, cyber Security

Year : 2012

Abstract : Anomaly detection has been considered as a critical problem in any application area. In computer networks, anomaly detection is important as any kind of abnormal behavior in the network data is considered harmful to the end user. Snort is an open source NIDS tool that uses misuse detection method for intrusion detection. There are many pre-processor and detection plug-ins for Snort. Pre-processor plug-ins is meant to process the packet captured but some are meant for detection of anomalies also. Hence we are implementing a preprocessor plug-in for Snort meant for anomaly detection approach using the machine learning algorithm support vector machine and integrating into Snort. The anomalies detected by the plug-in are new compared with the anomalies detected by the available pre-processor plug-ins. Also we created an intrusion detection dataset which is important for any process using the machine learning algorithms. The detection rate of the plug-in is high and the false alarm rate is low which is very important for any anomaly detection system. Hence integrating this plug-in into Snort helps to improve the detection rate of the plugins that can be run in packet sniffer mode. Copyright 2012 ACM.

Cite this Research Publication : Aa George, Poornachandran, Pb, and Dr. Kaimal, M. R., “Adsvm: Pre-processor plug-in using support vector machine algorithm for snort”, in ACM International Conference Proceeding Series, Kerala, 2012, pp. 179-184

Admissions Apply Now