A multiple-kernel clustering based intrusion detection scheme for 5G and IoT networks
المؤلف | Hu, Ning |
المؤلف | Tian, Zhihong |
المؤلف | Lu, Hui |
المؤلف | Du, Xiaojiang |
المؤلف | Guizani, Mohsen |
تاريخ الإتاحة | 2022-10-29T11:16:50Z |
تاريخ النشر | 2021-11-01 |
اسم المنشور | International Journal of Machine Learning and Cybernetics |
المعرّف | http://dx.doi.org/10.1007/s13042-020-01253-w |
الاقتباس | Hu, N., Tian, Z., Lu, H., Du, X., & Guizani, M. (2021). A multiple-kernel clustering based intrusion detection scheme for 5G and IoT networks. International Journal of Machine Learning and Cybernetics, 12(11), 3129-3144. |
الرقم المعياري الدولي للكتاب | 18688071 |
الملخص | The 5G network provides higher bandwidth and lower latency for edge IoT devices to access the core business network. But at the same time, it also expands the attack surface of the core network, which makes the enterprise network face greater security threats. To protect the security of core business, the network infrastructure must be able to recognize not only the known abnormal traffic, but also new emerging threats. Intrusion Detection Systems (IDSs) are widely used to protect the core network against external intrusions. Most of the existing research works design anomaly detection models for a specific set of traffic attributes. In fact, it is difficult for us to find the specific correspondence between traffic attributes and attack behaviors. Worse, some traffic attributes will be missing in the IoT environment, which further increases the difficulty of anomaly analysis. In traditional solutions, the missing attributes are usually filled with zero or mean values. Sometimes, the attributes are directly discarded. Both of these methods may result in lower detection accuracy. To solve this problem, we propose an intrusion detection method based on multiple-kernel clustering (MKC) algorithms. Be different from zero value filling and mean value filling, the proposed method completes the absent traffic property through similarity calculation. Experimental results show that this method can effectively improve the clustering accuracy of incomplete sampled data, at the same time it can reduce the sensitivity of the anomaly detection model to the selection of traffic feature, and has a better tolerance for poor-quality traffic sampled data. |
اللغة | en |
الناشر | Springer Science and Business Media Deutschland GmbH |
الموضوع | Anomaly detection Machine Learning Multiple kernel clustering Network intrusion detection |
النوع | Article |
الصفحات | 3129-3144 |
رقم العدد | 11 |
رقم المجلد | 12 |
الملفات في هذه التسجيلة
الملفات | الحجم | الصيغة | العرض |
---|---|---|---|
لا توجد ملفات لها صلة بهذه التسجيلة. |
هذه التسجيلة تظهر في المجموعات التالية
-
علوم وهندسة الحاسب [2283 items ]