| Download | - View accepted manuscript: Y-means: A Clustering Method for Intrusion Detection (PDF, 389 KiB)
|
|---|
| Author | Search for: Guan, Y.; Search for: Ghorbani, Ali-Akbar; Search for: Belacel, Nabil |
|---|
| Format | Text, Article |
|---|
| Conference | Canadian Conference on Electrical and Computer Engineering, May 3-4, 2003, Montréal, Québec, Canada |
|---|
| Subject | clustering; intrusion detection; K-means |
|---|
| Abstract | As the Internet spreads to each corner of the world, computers are exposed to miscellaneous intrusions from the World Wide Web. We need effective intrusion detection systems to protect our computers from these unauthorized or malicious actions. Traditional instance-based learning methods for Intrusion Detection can only detect known intrusions since these methods classify instances based on what they have learned. They rarely detect the intrusions that they have not learned before. In this paper, we present a clustering heuristic for intrusion detection, called Y-means. This proposed heuristic is based on the K-means algorithm and other related clustering algorithms. It overcomes two shortcomings of K-means: number of clusters dependency and degeneracy. The result of simulations run on the KDD-99 data set shows that Y-means is an effective method for partitioning large data space. A detection rate of 89.89% and a false alarm rate of 1.00% are achieved with Y-means. |
|---|
| Publication date | 2003 |
|---|
| In | |
|---|
| Language | English |
|---|
| NRC number | NRCC 45842 |
|---|
| NPARC number | 8913828 |
|---|
| Export citation | Export as RIS |
|---|
| Report a correction | Report a correction (opens in a new tab) |
|---|
| Record identifier | 18efc855-5f13-4a7c-90ee-852e9c51c782 |
|---|
| Record created | 2009-04-22 |
|---|
| Record modified | 2021-01-05 |
|---|
