Anomaly detection from network logs using diffusion maps
| dc.contributor.author | Sipola, Tuomo | |
| dc.contributor.author | Juvonen, Antti | |
| dc.contributor.author | Lehtonen, Joel | |
| dc.contributor.editor | Iliadis, Lazaros | |
| dc.contributor.editor | Jayne, Chrisina | |
| dc.date.accessioned | 2012-06-05T09:10:09Z | |
| dc.date.available | 2012-06-05T09:10:09Z | |
| dc.date.issued | 2011 | |
| dc.identifier.citation | Sipola, T., Juvonen, A., & Lehtonen, J. (2011). Anomaly detection from network logs using diffusion maps. In L. Iliadis, & C. Jayne (Eds.), <i>Engineering Applications of Neural Networks</i> (pp. 172-181). Springer. IFIP Advances in Information and Communication Technology, 363. <a href="https://doi.org/10.1007/978-3-642-23957-1_20" target="_blank">https://doi.org/10.1007/978-3-642-23957-1_20</a> | |
| dc.identifier.other | CONVID_20672180 | |
| dc.identifier.other | TUTKAID_46410 | |
| dc.identifier.uri | https://jyx.jyu.fi/handle/123456789/37967 | |
| dc.description.abstract | The goal of this study is to detect anomalous queries from network logs using a dimensionality reduction framework. The fequencies of 2-grams in queries are extracted to a feature matrix. Dimensionality reduction is done by applying diffusion maps. The method is adaptive and thus does not need training before analysis. We tested the method with data that includes normal and intrusive traffic to a web server. This approach finds all intrusions in the dataset. | |
| dc.language.iso | eng | |
| dc.publisher | Springer | |
| dc.relation.ispartof | Engineering Applications of Neural Networks | |
| dc.relation.ispartofseries | IFIP Advances in Information and Communication Technology | |
| dc.relation.uri | http://www.springerlink.com/index/N615170400W21N13.pdf | |
| dc.rights | In Copyright | |
| dc.subject.other | hyökkäyksen havaitseminen | |
| dc.subject.other | poikkeavuuden havaitseminen | |
| dc.subject.other | n-grammit | |
| dc.subject.other | diffuusiokartta | |
| dc.subject.other | intrusion detection | |
| dc.subject.other | anomaly detection | |
| dc.subject.other | n-grams | |
| dc.subject.other | diffusion map | |
| dc.title | Anomaly detection from network logs using diffusion maps | |
| dc.type | conferenceObject | |
| dc.identifier.urn | URN:NBN:fi:jyu-201206051800 | |
| dc.contributor.laitos | Tietotekniikan laitos | fi |
| dc.contributor.laitos | Department of Mathematical Information Technology | en |
| dc.contributor.oppiaine | Tietotekniikka | fi |
| dc.contributor.oppiaine | Mathematical Information Technology | en |
| dc.type.uri | http://purl.org/eprint/type/ConferencePaper | |
| dc.date.updated | 2012-06-05T03:30:05Z | |
| dc.relation.isbn | 978-3-642-23956-4 | |
| dc.type.coar | http://purl.org/coar/resource_type/c_5794 | |
| dc.description.reviewstatus | peerReviewed | |
| dc.format.pagerange | 172-181 | |
| dc.relation.issn | 1868-4238 | |
| dc.type.version | acceptedVersion | |
| dc.rights.copyright | © Springer. This is an electronic final draft version of an article whose final and definitive form has been published by Springer. | |
| dc.rights.accesslevel | openAccess | |
| dc.subject.yso | tiedonlouhinta | |
| dc.subject.yso | koneoppiminen | |
| jyx.subject.uri | http://www.yso.fi/onto/yso/p5520 | |
| jyx.subject.uri | http://www.yso.fi/onto/yso/p21846 | |
| dc.rights.url | https://rightsstatements.org/page/InC/1.0/ | |
| dc.relation.doi | 10.1007/978-3-642-23957-1_20 | |
| dc.type.okm | A4 |
Aineistoon kuuluvat tiedostot
Aineisto kuuluu seuraaviin kokoelmiin
Ellei muuten mainita, aineiston lisenssi on In Copyright