Publication Type : Conference Paper
Thematic Areas : Amrita Center for Cybersecurity Systems and Networks
Publisher : ACM International Conference Proceeding Series
Source : ACM International Conference Proceeding Series, Kerala, p.179-184 (2012)
ISBN : 9781450318228
Keywords : Abnormal behavior, Anomaly detection, Anomaly detection systems, Application area, Critical problems, Data set, Internet, Intrusion detection, Learning algorithms, Snort, Support vector machine algorithm, Support vector machines
Campus : Amritapuri
School : Centre for Cybersecurity Systems and Networks, Department of Computer Science and Engineering, School of Computing
Center : Cyber Security
Department : Computer Science, cyber Security
Year : 2012
Abstract : Anomaly detection has been considered as a critical problem in any application area. In computer networks, anomaly detection is important as any kind of abnormal behavior in the network data is considered harmful to the end user. Snort is an open source NIDS tool that uses misuse detection method for intrusion detection. There are many pre-processor and detection plug-ins for Snort. Pre-processor plug-ins is meant to process the packet captured but some are meant for detection of anomalies also. Hence we are implementing a preprocessor plug-in for Snort meant for anomaly detection approach using the machine learning algorithm support vector machine and integrating into Snort. The anomalies detected by the plug-in are new compared with the anomalies detected by the available pre-processor plug-ins. Also we created an intrusion detection dataset which is important for any process using the machine learning algorithms. The detection rate of the plug-in is high and the false alarm rate is low which is very important for any anomaly detection system. Hence integrating this plug-in into Snort helps to improve the detection rate of the plugins that can be run in packet sniffer mode. Copyright 2012 ACM.
Cite this Research Publication : Aa George, Poornachandran, Pb, and Dr. Kaimal, M. R., “Adsvm: Pre-processor plug-in using support vector machine algorithm for snort”, in ACM International Conference Proceeding Series, Kerala, 2012, pp. 179-184