A fuzzy anomaly detection system based on hybrid PSO-Kmeans algorithm in content-centric networks

In Content-Centric Networks (CCNs) as a possible future Internet, new kinds of attacks and security challenges – from Denial of Service (DoS) to privacy attacks – will arise. An efficient and effective security mechanism is required to secure content and defense against unknown and new forms of atta...

Celý popis

Uloženo v:
Podrobná bibliografie
Vydáno v:Neurocomputing (Amsterdam) Ročník 149; s. 1253 - 1269
Hlavní autoři: Karami, Amin, Guerrero-Zapata, Manel
Médium: Journal Article Publikace
Jazyk:angličtina
Vydáno: Elsevier B.V 03.02.2015
Témata:
Algorithms
Anomalies
Anomaly detection
Clustering analysis
Clusters
Content-centric networks
Enginyeria de la telecomunicació
Fuzzy
Fuzzy logic
Fuzzy set
Fuzzy set theory
Internet
K-means
Mesures de seguretat
Networks
Optimization
Particle swarm optimization
Particle swarm optimization K-means
Security
Security measures
Telemàtica i xarxes d'ordinadors
Àrees temàtiques de la UPC
K-means
Clustering analysis
Fuzzy set
Particle swarm optimization
Anomaly detection
Content-centric networks
ISSN:0925-2312, 1872-8286
On-line přístup:Získat plný text
Tagy: Přidat tag
Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!
Popis
Shrnutí:In Content-Centric Networks (CCNs) as a possible future Internet, new kinds of attacks and security challenges – from Denial of Service (DoS) to privacy attacks – will arise. An efficient and effective security mechanism is required to secure content and defense against unknown and new forms of attacks and anomalies. Usually, clustering algorithms would fit the requirements for building a good anomaly detection system. K-means is a popular anomaly detection method to classify data into different categories. However, it suffers from the local convergence and sensitivity to selection of the cluster centroids. In this paper, we present a novel fuzzy anomaly detection system that works in two phases. In the first phase – the training phase – we propose an hybridization of Particle Swarm Optimization (PSO) and K-means algorithm with two simultaneous cost functions as well-separated clusters and local optimization to determine the optimal number of clusters. When the optimal placement of clusters centroids and objects are defined, it starts the second phase. In this phase – the detection phase – we employ a fuzzy approach by the combination of two distance-based methods as classification and outlier to detect anomalies in new monitoring data. Experimental results demonstrate that the proposed algorithm can achieve to the optimal number of clusters, well-separated clusters, as well as increase the high detection rate and decrease the false positive rate at the same time when compared to some other well-known clustering algorithms.
Bibliografie:ObjectType-Article-1
SourceType-Scholarly Journals-1
ObjectType-Feature-2
content type line 23
ISSN:0925-2312
1872-8286
DOI:10.1016/j.neucom.2014.08.070