Publication Type:

Conference Paper

Source:

ACM International Conference Proceeding Series, Kerala, p.179-184 (2012)

ISBN:

9781450318228

URL:

http://www.scopus.com/inward/record.url?eid=2-s2.0-84879830238&partnerID=40&md5=2bb8e302f32b0f81328a7cd347675810

Keywords:

Abnormal behavior, Anomaly detection, Anomaly detection systems, Application area, Critical problems, Data set, Internet, Intrusion detection, Learning algorithms, Snort, Support vector machine algorithm, Support vector machines

Abstract:

Anomaly detection has been considered as a critical problem in any application area. In computer networks, anomaly detection is important as any kind of abnormal behavior in the network data is considered harmful to the end user. Snort is an open source NIDS tool that uses misuse detection method for intrusion detection. There are many pre-processor and detection plug-ins for Snort. Pre-processor plug-ins is meant to process the packet captured but some are meant for detection of anomalies also. Hence we are implementing a preprocessor plug-in for Snort meant for anomaly detection approach using the machine learning algorithm support vector machine and integrating into Snort. The anomalies detected by the plug-in are new compared with the anomalies detected by the available pre-processor plug-ins. Also we created an intrusion detection dataset which is important for any process using the machine learning algorithms. The detection rate of the plug-in is high and the false alarm rate is low which is very important for any anomaly detection system. Hence integrating this plug-in into Snort helps to improve the detection rate of the plugins that can be run in packet sniffer mode. Copyright 2012 ACM.

Notes:

cited By (since 1996)0; Conference of org.apache.xalan.xsltc.dom.DOMAdapter@cbd380e ; Conference Date: org.apache.xalan.xsltc.dom.DOMAdapter@5aab25aa Through org.apache.xalan.xsltc.dom.DOMAdapter@1a35ea67; Conference Code:97500

Cite this Research Publication

Aa George, Poornachandran, Pb, and M. Kaimal, R., “Adsvm: Pre-processor plug-in using support vector machine algorithm for snort”, in ACM International Conference Proceeding Series, Kerala, 2012, pp. 179-184.

207
PROGRAMS
OFFERED
5
AMRITA
CAMPUSES
15
CONSTITUENT
SCHOOLS
A
GRADE BY
NAAC, MHRD
9th
RANK(INDIA):
NIRF 2017
150+
INTERNATIONAL
PARTNERS