A fuzzy measure for intrusion and anomaly detection

• Published in: 2017 International Conference on Engineering & MIS (ICEMIS) pp. 1 - 6
• Main Authors: Aljawarneh, Shadi A., RadhaKrishna, V., Kumar, G. Rajesh
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01-05-2017
• Subjects: anomaly; classification; Classification algorithms; Clustering algorithms; Dimensionality reduction; evolutionary clustering; intrusion; Intrusion detection; pattern vector; posterior probability; Testing; Training
• ISSN: 2575-1328
• DOI: 10.1109/ICEMIS.2017.8273113

Finding intrusion and anomalies in networks is a problem of wide research interest both from academia and software industry. This work has three contributions. The first contribution is a dissimilarity measure for intrusion detection. The dissimilarity measure is also applied to achieve evolutionary clustering and dimensionality reduction of system calls. Earlier works in evolutionary clustering used basic Gaussian membership function to incrementally cluster by randomly assuming the initial deviation. This work aims at achieving evolutionary clustering by defining the expression to choose, initial deviation by eliminating the need to assume the standard deviation. Finally classification may also be performed using the proposed dissimilarity measure.