Abstract
In view of the complexity of information system environment and the diversity of security requirements, many scholars proposed intrusion detection methods based on outlier mining. In order to meet the security requirement of condition guarantee information system, this paper proposes an anomaly detection with changing cluster centers (ADCCC). The rough set algorithm is used to reduce the sample set, and the number of sample repeats is determined on the basis of the duplicated degrees. The algorithm determines whether the sample is an outlier sample, mainly by changing the cluster center before and after adding a sample. Based on the overall deviation degree of the sample set, we can determine whether the sample set is an anomaly sample. Experimental results show that ADCCC algorithm has higher detection rate for anomaly detection.
Keywords
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsReferences
Guo, C., Zhou, Y.J., Ping, Y., et al.: Efficient intrusion detection using representative instances. Comput. Secur. 39(4), 255–267 (2013)
Wang, Y., et al.: A novel intrusion detection system based on advanced Naive Bayesian classification. In: Long, K., Leung, V.C.M., Zhang, H., Feng, Z., Li, Y., Zhang, Z. (eds.) 5GWN 2017. LNICST, vol. 211, pp. 581–588. Springer, Cham (2018). https://doi.org/10.1007/978-3-319-72823-0_53
Feng, Y., Shigan, Y.U., Liu, H.: Network intrusion detection based on KNN-IPSO selecting features. Comput. Eng. Appl. (2014)
Jain, Y.K.: An efficient intrusion detection based on decision tree classifier using feature reduction. In: The First International Symposium on Data, Privacy, and E-Commerce, ISDPE 2007 (2007). 2012:c1
Hu, L., Zhang, Z., Tang, H., et al.: An improved intrusion detection framework based on artificial neural networks. In: International Conference on Natural Computation, pp. 1115–1120. IEEE (2016)
Breunig, M.M., Kriegel, H.P., Ng, R.T., et al.: LOF: identifying density-based local outliers. ACM Sigmod Rec. 29(2), 93–104 (2000)
Zhang, K., Hutter, M., Jin, H.: A new local distance-based outlier detection approach for scattered real-world data. In: Theeramunkong, T., Kijsirikul, B., Cercone, N., Ho, T.-B. (eds.) PAKDD 2009. LNCS (LNAI), vol. 5476, pp. 813–822. Springer, Heidelberg (2009). https://doi.org/10.1007/978-3-642-01307-2_84
Pawlak, Z.: Rough set theory and its applications to data analysis. Cybern. Syst. 29(29), 661–688 (2010)
Chen, Q., Liangxiao, J., Chaoqun, L.: Not always simple classification: learning super parent for class probability estimation. Expert Syst. Appl. 42(13), 5433–5440 (2015)
Chen, H., Li, T., Luo, C., et al.: A decision-theoretic rough set approach for dynamic data mining. IEEE Trans. Fuzzy Syst. 23(6), 1958–1970 (2015)
Lee, Y.J., Yeh, Y.R., Wang, Y.C.F.: Anomaly detection via online oversampling principal component analysis. IEEE Trans. Knowl. Data Eng. 25(7), 1460–1470 (2013)
Bhuyan, M.H., Bhattacharyya, D.K., Kalita, J.K.: NADO: network anomaly detection using outlier approach. In: International Conference on Communication, Computing & Security, ICCCS 2011, February, Odisha, India, DBLP, pp. 531–536 (2011)
Xie, S., Nie, H.: Retinal vascular image segmentation using genetic algorithm plus FCM clustering. In: Proceedings of the 3rd International Conference on Intelligent System Design and Engineering Applications, Piscataway, NJ, pp. 1225–1228. IEEE (2013)
Shang, W., Zeng, P., Wan, M., et al.: Intrusion detection algorithm based oil OCSVM in industrial control system. Secur. Commun. Netw. 9(10), 1040–1049 (2016)
Jaddi, N.S., Abdullah, S.: An interactive rough set attribute reduction using great deluge algorithm. In: Zaman, H.B., Robinson, P., Olivier, P., Shih, T.K., Velastin, S. (eds.) IVIC 2013. LNCS, vol. 8237, pp. 285–299. Springer, Cham (2013). https://doi.org/10.1007/978-3-319-02958-0_27
Jiang, L., Zhang, H.: Weightily averaged one-dependence estimators. In: Yang, Q., Webb, G. (eds.) PRICAI 2006. LNCS (LNAI), vol. 4099, pp. 970–974. Springer, Heidelberg (2006). https://doi.org/10.1007/978-3-540-36668-3_116
KDD-CUP-99 task description [EB/OL]. http://kdd.ics.uci.edu/databases/kddcup99/task.html. Accessed 29 June 2016
KDD cup 1999 data [EB/OL]. http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html. Accessed 29 June 2016
Singh, P., Garg, S., Kumar, V., et a1.: A testbed for SCADA cyber security and intrusion detection. In: Proceedings of International Conference on Cyber Security of Smart Cities, Industrial Control System and Communications (2015). 1.6
Author information
Authors and Affiliations
Corresponding authors
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2018 Springer Nature Switzerland AG
About this paper
Cite this paper
Peng, Z., Liang, Z. (2018). Anomaly Detection with Changing Cluster Centers. In: Gan, G., Li, B., Li, X., Wang, S. (eds) Advanced Data Mining and Applications. ADMA 2018. Lecture Notes in Computer Science(), vol 11323. Springer, Cham. https://doi.org/10.1007/978-3-030-05090-0_4
Download citation
DOI: https://doi.org/10.1007/978-3-030-05090-0_4
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-05089-4
Online ISBN: 978-3-030-05090-0
eBook Packages: Computer ScienceComputer Science (R0)