Título:
Mining Network Traffic Data for Attacks through MOVICAB-IDS.
Mining Network Traffic Data for Attacks through MOVICAB-IDS.
Autores:
Herrero Cosío, Álvaro; Corchado Rodríguez, Emilio
Libro:
Studies in Computational Intelligence Foundations of Computational Intelligence Volume 4. Studies in Computational Intelligence. Volumen 204, pp. 377-394.
Fecha de Publicación:
2009
ISSN:
1860-949X (Print), 1860-9503 (Online)
ISBN:
978-3-642-01087-3 (Print), 978-3-642-01088-0 (Online)
This study describes an Intrusion Detection System (IDS) called MOVICAB-IDS (MObile VIsualization Connectionist Agent-Based IDS). This system is based on a dynamic multiagent architecture combining case-base reasoning and an unsupervised neural projection model to visualize and analyze the flow of network traffic data. The formulation of the underlying Intrusion Detection framework is presented in advance. The described IDS enables the most interesting projections of a massive traffic data set to be extracted and depicted through a functional and mobile visualization interface. By its advanced visualization facilities, MOVICAB-IDS allows providing an overview of the network traffic as well as identifying anomalous situations tackled by computer networks, responding to the challenges presented by traffic volume and diversity. To show the performance of the described IDS, it has been tested in different domains containing several interesting attacks and anomalous situations.