Paper Abstract and Keywords |
Presentation |
2016-05-19 10:25
IDS using Discrete Fourier Transform with window functions Yusuke Tsuge, Keisuke Iwai, Hidema Tanaka, Takakazu Kurokawa (NDA) ISEC2016-2 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
An Intrusion Detection System (IDS) is countermeasure against network attack. There are mainly two types of detections; signature-based and anomaly-based. Signature-based has false negatives and anomaly-based has false positives. Therefore establishment of a method to reduce these types of false has become an issue of IDS. In this paper, we propose a new detection method in anomaly-based using Discrete Fourier Transform(DFT) with window functions.
In this method, we assume fluctuation of payload in normal sessions as random. On the other hand, we can see fluctuation in attack sessions have bias. From the view point of spectrum analysis for these fluctuations,
we can find out characteristic spectrum peaks in attack session. Using this feature, we can detect attack sessions.
Example detecting against Kyoto2006+ Dataset shows 12.0% false positive at most, and 0.0 % of false negative. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
IDS / / / / / / / |
Reference Info. |
IEICE Tech. Rep., vol. 116, no. 35, ISEC2016-2, pp. 5-11, May 2016. |
Paper # |
ISEC2016-2 |
Date of Issue |
2016-05-12 (ISEC) |
ISSN |
Print edition: ISSN 0913-5685 Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
ISEC2016-2 |
Conference Information |
Committee |
ISEC |
Conference Date |
2016-05-19 - 2016-05-19 |
Place (in Japanese) |
(See Japanese page) |
Place (in English) |
Kikai-Shinko-Kaikan Bldg. |
Topics (in Japanese) |
(See Japanese page) |
Topics (in English) |
|
Paper Information |
Registration To |
ISEC |
Conference Code |
2016-05-ISEC |
Language |
Japanese |
Title (in Japanese) |
(See Japanese page) |
Sub Title (in Japanese) |
(See Japanese page) |
Title (in English) |
IDS using Discrete Fourier Transform with window functions |
Sub Title (in English) |
|
Keyword(1) |
IDS |
Keyword(2) |
|
Keyword(3) |
|
Keyword(4) |
|
Keyword(5) |
|
Keyword(6) |
|
Keyword(7) |
|
Keyword(8) |
|
1st Author's Name |
Yusuke Tsuge |
1st Author's Affiliation |
National Defense Academy (NDA) |
2nd Author's Name |
Keisuke Iwai |
2nd Author's Affiliation |
National Defense Academy (NDA) |
3rd Author's Name |
Hidema Tanaka |
3rd Author's Affiliation |
National Defense Academy (NDA) |
4th Author's Name |
Takakazu Kurokawa |
4th Author's Affiliation |
National Defense Academy (NDA) |
5th Author's Name |
|
5th Author's Affiliation |
() |
6th Author's Name |
|
6th Author's Affiliation |
() |
7th Author's Name |
|
7th Author's Affiliation |
() |
8th Author's Name |
|
8th Author's Affiliation |
() |
9th Author's Name |
|
9th Author's Affiliation |
() |
10th Author's Name |
|
10th Author's Affiliation |
() |
11th Author's Name |
|
11th Author's Affiliation |
() |
12th Author's Name |
|
12th Author's Affiliation |
() |
13th Author's Name |
|
13th Author's Affiliation |
() |
14th Author's Name |
|
14th Author's Affiliation |
() |
15th Author's Name |
|
15th Author's Affiliation |
() |
16th Author's Name |
|
16th Author's Affiliation |
() |
17th Author's Name |
|
17th Author's Affiliation |
() |
18th Author's Name |
|
18th Author's Affiliation |
() |
19th Author's Name |
|
19th Author's Affiliation |
() |
20th Author's Name |
|
20th Author's Affiliation |
() |
Speaker |
Author-1 |
Date Time |
2016-05-19 10:25:00 |
Presentation Time |
25 minutes |
Registration for |
ISEC |
Paper # |
ISEC2016-2 |
Volume (vol) |
vol.116 |
Number (no) |
no.35 |
Page |
pp.5-11 |
#Pages |
7 |
Date of Issue |
2016-05-12 (ISEC) |
|