Detecting Computer Network Attacks Using Statistical Discriminators and Cluster Analysis.

• Main Author: Holanda, Raimir
• Publication Date: 2009
• Other Authors: Maia, José Everardo Bessa, do Carmo, Marcus Fábio Fontenelle
• Format: Article
• Language: por
• Source: Revista Tecnologia (Fortaleza. Online)
• Download full: https://ojs.unifor.br/tec/article/view/65
• topic: Segurança em redes de computadores. Gerenciamento de dados. Segurança de dados. Detecção de intrusos. Estatística multivariada.

Attacks represent a serious threat to a network environment, and therefore need to be promptly detected. New attack types, of which detection systems may not even be aware, are the most difficult to detect. Currently, the available methods are mainly based on signature or learning algorithms and generally cannot detect these new attacks. The approach presented here uses a small number of statistical discriminators and cluster analysis to detect attacks, obtaining results which are better than the results found in previous papers. Cluster analysis is an unsupervised technique and, therefore, it is able to detect new attacks. We performed an empirical test using real traces.