DFAID: Density‐aware and feature‐deviated active intrusion detection over network traffic streams

We study the problem of active intrusion detection over network traffic streams. Existing works create clusters for known classes and manually label instances outside the clusters for detecting novel attack classes and concept drift, yet several challenges are present. First, these methods assume th...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	Computers & security 2022-07, Vol.118, p.102719, Article 102719
Hauptverfasser:	Li, Bin, Wang, Yijie, Xu, Kele, Cheng, Li, Qin, Zhiquan
Format:	Artikel
Sprache:	eng
Schlagworte:	Active learning Clustering Communications traffic Density Domain knowledge Domains Drift Incremental update Intrusion Intrusion detection Network traffic streams Performance degradation Streams Traffic speed
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!