Intrusion detection in unlabeled data with quarter-sphere Support Vector Machines
| dc.contributor.author | Kotenko, Igor | |
| dc.contributor.author | Laskov, Pavel | |
| dc.contributor.author | Schäfer, Christin | |
| dc.date.accessioned | 2006-08-16T12:10:54Z | |
| dc.date.available | 2006-08-16T12:10:54Z | |
| dc.date.issued | 2004-07 | |
| dc.description.abstract | Practical application of data mining and machine learning techniques to intrusion detection is often hindered by the difficulty to produce clean data for the training. To address this problem a geometric framework for unsupervised anomaly detection has been recently proposed. In this framework, the data is mapped into a feature space, and anomalies are detected as the entries in sparsely populated regions. In this contribution we propose a novel formulation of a one-class Support Vector Machine (SVM) specially designed for typical IDS data features. The key idea of our ”quarter-sphere” algorithm is to encompass the data with a hypersphere anchored at the center of mass of the data in feature space. The proposed method and its behavior on varying percentages of attacks in the data is evaluated on the KDDCup 1999 dataset. | en |
| dc.format.extent | 780026 bytes | |
| dc.format.mimetype | application/pdf | |
| dc.identifier.citation | Pavel Laskov, Christin Schäfer, Igor Kotenko: Intrusion detection in unlabeled data with quarter-sphere Support Vector Machines. In Flegel, U.; Meier, M. (Eds.): Proc. of the International GI Workshop on Detection of Intrusions and Malware & Vulnerability Assessment, number P-46 in Lecture Notes in Informatics, pp. 71-82, Dortmund, Germany, July 2004, Köllen Verlag; ISBN 3-88579-365-X. | de |
| dc.identifier.uri | http://hdl.handle.net/2003/22775 | |
| dc.identifier.uri | http://dx.doi.org/10.17877/DE290R-8142 | |
| dc.language.iso | en | |
| dc.publisher | Gesellschaft für Informatik | de |
| dc.relation.ispartof | DIMVA 2004, July 6-7, Dortmund, Germany | en |
| dc.relation.ispartofseries | Lecture Notes in Informatics;P-46 | en |
| dc.subject | Intrusion Detection | en |
| dc.subject | Support Vector Machines | en |
| dc.subject.ddc | 004 | |
| dc.title | Intrusion detection in unlabeled data with quarter-sphere Support Vector Machines | en |
| dc.type | Text | de |
| dc.type.publicationtype | conferenceObject | en |
| dcterms.accessRights | open access |