Artificial Intelligence White Papers
Rule-Based Anomaly Detection on IP Flows
Overview Rule-based packet classification is a powerful method for identifying traffic anomalies, with network security as a key application area. While popular systems like Snort are used in many network locations, comprehensive deployment across Tier-1 service provider networks is costly due to the need for high-speed monitors at many network ingress points. This paper exploits correlations between packet and flow level information via a Machine Learning (ML) approach to associate packet level alarms with a feature vector derived from flow records on the same traffic. They describe a system architecture for network-wide flow-alarming and describe the steps required to establish a proof-of-concept. They evaluate prediction accuracy of candidate ML algorithms on actual packet traces.
| Publisher | AT&T Intellectual Property | File Format | |
|---|---|---|---|
| Date Published | January 2009 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSSAutonomous Mental Development: A New Interdisciplinary Transactions for Natural and Artificial Intelligence
DownloadAlthough some baby animals can get up and walk within hours after birth, what a human child learns during the first two years of life easily exceeds what those animals...
Creating and Using Oracle VM Templates: The Fastest Way to Deploy Any Enterprise Software
The intended audience for this paper is end-users of Oracle VM as well as third party ISVs (Independent Software Vendors), system-integrators, and value-added resellers interested in creating and using Oracle...
Detecting a Denial of Service Using Artificial Intelligent Tools, Genetic Algorithm
This paper describes novel work in using Genetic Algorithm for detecting misuse of programs. A brief overview of Intrusion Detection System, genetic algorithm and related detection techniques is presented. Developing...
Rule-Based Anomaly Detection on IP Flows
Rule-based packet classification is a powerful method for identifying traffic anomalies, with network security as a key application area. While popular systems like Snort are used in many network locations,...
MSDN Webcast: Game Programming in DarkGDK and C++ (Part 6 of 6): Finalizing Levels, Testing, and Polish (Level 100)
The attendee of this webcast will learn how to set the difficulty curve of the game and make levels. The presenter also discusses testing the game, making final adjustments to...
