• DocumentCode
    2821842
  • Title

    Applications of HMM in Protocol Anomaly Detection

  • Author

    Zhao, Jing ; Huang, Houkuan ; Tian, ShengFeng ; Zhao, Xiang

  • Author_Institution
    Sch. of Comput. & Inf. Technol., Beijing Jiaotong Univ., Beijing, China
  • Volume
    2
  • fYear
    2009
  • fDate
    24-26 April 2009
  • Firstpage
    347
  • Lastpage
    349
  • Abstract
    A protocol anomaly detection model based on hidden Markov model (HMM) is given in this work which can verify normal and abnormal traffic. Then we demonstrate the model´s correctness and effectiveness by using MIT Lincoln Laboratory 1999 DARPA Intrusion Detection Evaluation Data Set.
  • Keywords
    computer networks; hidden Markov models; protocols; telecommunication security; telecommunication traffic; hidden Markov model; intrusion detection; network security; network traffic; protocol anomaly detection; Application software; Data security; Hidden Markov models; Information technology; Intrusion detection; Laboratories; Protocols; Telecommunication traffic; Testing; Traffic control; HMM; IDS;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computational Sciences and Optimization, 2009. CSO 2009. International Joint Conference on
  • Conference_Location
    Sanya, Hainan
  • Print_ISBN
    978-0-7695-3605-7
  • Type

    conf

  • DOI
    10.1109/CSO.2009.51
  • Filename
    5193967