Abstract
In this paper, we present an efficient and biologically inspired clustering model for anomaly intrusion detection. The proposed model called Ant Colony Clustering Model (ACCM) that improves existing ant-based clustering model in searching for optimal clustering heuristically. Experimental results on KDD-Cup99 benchmark data show that ACCM is effective to detect known and unseen attacks with high detection rate and low false positive rate.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Deneubourg J.L., Goss S., Franks N., Sendova-Franks A., Detrain C., Chretien L. (1991) The Dynamics of Collective Sorting: Robot-Like Ant and Ant-Like Robot. In: 1st Conf. on Simulation of Adaptive Behavior: from animals to animats, Cambridge, MA: MIT Press, pp 356–365
Lumer E., Faieta B. (1994) Diversity and Adaptation in Populations of Clustering Ants. In: 3rd Int. Conf. on Simulation of Adaptive Behavior: from animals to animats 3, Cambridge, MA: MIT Press, pp 499–508
Handl J., Knowles J., Dorigo M. (2004) Strategies for the Increased Robustness of Ant-based Clustering. In Engineering Self-Organising Systems, volume 2977 of LNCS, Springer-Verlag Heidelberg, pp 90–104
Parunak H.V.D., Brueckner S., Sauter J.A., Posdamer J. (2001) Mechanics and Military Applications for Synthetic Pheromones. Workshop on Autonomy Oriented Computation, Montreal, Canada
Hyvärinen A. (1999) Fast and Robust Fixed-point Algorithms for Independent Component Analysis. IEEE Transaction on Neural Networks 10(3): 626–634
Maheshkumar S., Gursel, S. (2003) Application of Machine Learning Algorithms to KDD Intrusion Detection Dataset within Misuse Detection Context. In: Int. Conf. on Machine Learning, Models, Technologies and Applications, Las Vegas, Nevadat, USA, CSREA Press, pp 209–215
Elkan C. (2000) Results of the KDD’99 Classifier Learning. SIGKDD Exploration, ACM SIGKDD
KDD-Cup99 Dataset. http://kdd.ics.uci.edu/databases/kddcup99/task.html
Ramos V., Merelo J.J. (2002) Self-Organized Stigmergic Document Maps: Environment as a Mechanism for Context Learning. In: 1st Spanish Conf. on Evolutionary and Bio-Inspired Algorithms, Mérida, Spain, pp 284–293
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Tsang, W., Kwong, S. (2005). Unsupervised Anomaly Intrusion Detection Using Ant Colony Clustering Model. In: Abraham, A., Dote, Y., Furuhashi, T., Köppen, M., Ohuchi, A., Ohsawa, Y. (eds) Soft Computing as Transdisciplinary Science and Technology. Advances in Soft Computing, vol 29. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-32391-0_30
Download citation
DOI: https://doi.org/10.1007/3-540-32391-0_30
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-25055-5
Online ISBN: 978-3-540-32391-4
eBook Packages: EngineeringEngineering (R0)