Title
Collaborative approach to network behaviour analysis based on hardware-accelerated FlowMon probes
Abstract
Network behaviour analysis techniques are designed to detect intrusions and other undesirable behaviour in computer networks by analysing the traffic statistics. We present an efficient framework for integration of anomaly detection algorithms working on the identical input data. This framework is based on high-speed network traffic acquisition subsystem and on trust modelling, a well-established set of techniques from the multi-agent system field. Trust-based integration of algorithms results in classification with lower error rate, especially in terms of false positives. The presented system is suitable for both online and offline processing, and introduces a relatively low computational overhead compared to deployment of isolated anomaly detection algorithms.
Year
DOI
Venue
2009
10.1504/IJESDF.2009.023874
IJESDF
Keywords
Field
DocType
hardware acceleration, knowledge fusion, multi-agent intrusion detection, network behaviour analysis, network intrusion detection, network security
Data mining,Overhead (computing),Anomaly detection,Computer security,Computer science,Network security,Word error rate,Multi-agent system,Hardware acceleration,Online and offline,False positive paradox
Journal
Volume
Issue
ISSN
2
1
1751-911X
Citations 
PageRank 
References 
0
0.34
9
Authors
6
Name
Order
Citations
PageRank
Martin Rehak125128.57
Michal Pěchouček21134133.88
Martin Grill310110.79
Karel Bartos411012.60
Vojtech Krmicek5475.75
Pavel Celeda625127.91