Title :
Applications of HMM in Protocol Anomaly Detection
Author :
Zhao, Jing ; Huang, Houkuan ; Tian, ShengFeng ; Zhao, Xiang
Author_Institution :
Sch. of Comput. & Inf. Technol., Beijing Jiaotong Univ., Beijing, China
Abstract :
A protocol anomaly detection model based on hidden Markov model (HMM) is given in this work which can verify normal and abnormal traffic. Then we demonstrate the model´s correctness and effectiveness by using MIT Lincoln Laboratory 1999 DARPA Intrusion Detection Evaluation Data Set.
Keywords :
computer networks; hidden Markov models; protocols; telecommunication security; telecommunication traffic; hidden Markov model; intrusion detection; network security; network traffic; protocol anomaly detection; Application software; Data security; Hidden Markov models; Information technology; Intrusion detection; Laboratories; Protocols; Telecommunication traffic; Testing; Traffic control; HMM; IDS;
Conference_Titel :
Computational Sciences and Optimization, 2009. CSO 2009. International Joint Conference on
Conference_Location :
Sanya, Hainan
Print_ISBN :
978-0-7695-3605-7
DOI :
10.1109/CSO.2009.51