Matches in SemOpenAlex for { <https://semopenalex.org/work/W2619905194> ?p ?o ?g. }
- W2619905194 endingPage "539" @default.
- W2619905194 startingPage "530" @default.
- W2619905194 abstract "Although the task of malware detection in network traffic had been done successfully through Deep Packet Inspection (DPI) in the last two decades, this approach is becoming less efficient due to the continuous increasing of network traffic volumes and speeds and concerns on user's privacy. The recent alternative approach is the flow-based detection which has the ability to inspect high speed and backbone network traffic because it significantly aggregates and reduces the inspected data. However, the capability of this approach to detect packet-based attacks such as viruses and trojans is questionable because of the absence of the actual data at the payload level. In this paper we proof through experiments the ability to detect network flows that contain malicious packets that had been previously marked as malicious by Snort using only flow level attributes using several Machine Learning (ML) classifiers. We created our dataset from captured traces of a subnet of our university's network. The detection accuracy is found to be 75% True Positive (TP) with almost zero False Negative which we consider as a verification of the capability of flow-based approach to detect malware. This finding is encouraging for future researches where it can be combined with more traditional detection methods to form more powerful NIDSs" @default.
- W2619905194 created "2017-06-05" @default.
- W2619905194 creator A5006356032 @default.
- W2619905194 creator A5018356858 @default.
- W2619905194 creator A5019724335 @default.
- W2619905194 creator A5023159433 @default.
- W2619905194 date "2013-11-01" @default.
- W2619905194 modified "2023-09-23" @default.
- W2619905194 title "Malware dection using ip flow level attributes" @default.
- W2619905194 cites W1551705282 @default.
- W2619905194 cites W1590210340 @default.
- W2619905194 cites W1674877186 @default.
- W2619905194 cites W1997299558 @default.
- W2619905194 cites W2012095206 @default.
- W2619905194 cites W2114718230 @default.
- W2619905194 cites W2125055259 @default.
- W2619905194 cites W2144936818 @default.
- W2619905194 cites W2157578436 @default.
- W2619905194 cites W2164210932 @default.
- W2619905194 cites W2168938675 @default.
- W2619905194 cites W2544088398 @default.
- W2619905194 hasPublicationYear "2013" @default.
- W2619905194 type Work @default.
- W2619905194 sameAs 2619905194 @default.
- W2619905194 citedByCount "0" @default.
- W2619905194 crossrefType "journal-article" @default.
- W2619905194 hasAuthorship W2619905194A5006356032 @default.
- W2619905194 hasAuthorship W2619905194A5018356858 @default.
- W2619905194 hasAuthorship W2619905194A5019724335 @default.
- W2619905194 hasAuthorship W2619905194A5023159433 @default.
- W2619905194 hasConcept C110875604 @default.
- W2619905194 hasConcept C111919701 @default.
- W2619905194 hasConcept C114809511 @default.
- W2619905194 hasConcept C124101348 @default.
- W2619905194 hasConcept C126255220 @default.
- W2619905194 hasConcept C134066672 @default.
- W2619905194 hasConcept C154945302 @default.
- W2619905194 hasConcept C158379750 @default.
- W2619905194 hasConcept C162324750 @default.
- W2619905194 hasConcept C182590292 @default.
- W2619905194 hasConcept C187736073 @default.
- W2619905194 hasConcept C204679922 @default.
- W2619905194 hasConcept C21099817 @default.
- W2619905194 hasConcept C22735295 @default.
- W2619905194 hasConcept C2780451532 @default.
- W2619905194 hasConcept C31258907 @default.
- W2619905194 hasConcept C33923547 @default.
- W2619905194 hasConcept C38652104 @default.
- W2619905194 hasConcept C41008148 @default.
- W2619905194 hasConcept C541664917 @default.
- W2619905194 hasConcept C79403827 @default.
- W2619905194 hasConceptScore W2619905194C110875604 @default.
- W2619905194 hasConceptScore W2619905194C111919701 @default.
- W2619905194 hasConceptScore W2619905194C114809511 @default.
- W2619905194 hasConceptScore W2619905194C124101348 @default.
- W2619905194 hasConceptScore W2619905194C126255220 @default.
- W2619905194 hasConceptScore W2619905194C134066672 @default.
- W2619905194 hasConceptScore W2619905194C154945302 @default.
- W2619905194 hasConceptScore W2619905194C158379750 @default.
- W2619905194 hasConceptScore W2619905194C162324750 @default.
- W2619905194 hasConceptScore W2619905194C182590292 @default.
- W2619905194 hasConceptScore W2619905194C187736073 @default.
- W2619905194 hasConceptScore W2619905194C204679922 @default.
- W2619905194 hasConceptScore W2619905194C21099817 @default.
- W2619905194 hasConceptScore W2619905194C22735295 @default.
- W2619905194 hasConceptScore W2619905194C2780451532 @default.
- W2619905194 hasConceptScore W2619905194C31258907 @default.
- W2619905194 hasConceptScore W2619905194C33923547 @default.
- W2619905194 hasConceptScore W2619905194C38652104 @default.
- W2619905194 hasConceptScore W2619905194C41008148 @default.
- W2619905194 hasConceptScore W2619905194C541664917 @default.
- W2619905194 hasConceptScore W2619905194C79403827 @default.
- W2619905194 hasIssue "3" @default.
- W2619905194 hasLocation W26199051941 @default.
- W2619905194 hasOpenAccess W2619905194 @default.
- W2619905194 hasPrimaryLocation W26199051941 @default.
- W2619905194 hasRelatedWork W1510326104 @default.
- W2619905194 hasRelatedWork W1595868485 @default.
- W2619905194 hasRelatedWork W186778266 @default.
- W2619905194 hasRelatedWork W2111088811 @default.
- W2619905194 hasRelatedWork W2157949690 @default.
- W2619905194 hasRelatedWork W2182464523 @default.
- W2619905194 hasRelatedWork W2292926767 @default.
- W2619905194 hasRelatedWork W2529207922 @default.
- W2619905194 hasRelatedWork W2603584778 @default.
- W2619905194 hasRelatedWork W2884020303 @default.
- W2619905194 hasRelatedWork W2885743621 @default.
- W2619905194 hasRelatedWork W2891980516 @default.
- W2619905194 hasRelatedWork W2904488398 @default.
- W2619905194 hasRelatedWork W2913857451 @default.
- W2619905194 hasRelatedWork W2971148162 @default.
- W2619905194 hasRelatedWork W2982360865 @default.
- W2619905194 hasRelatedWork W3020392805 @default.
- W2619905194 hasRelatedWork W3049465447 @default.
- W2619905194 hasRelatedWork W3138760718 @default.
- W2619905194 hasRelatedWork W3168730590 @default.
- W2619905194 hasVolume "57" @default.
- W2619905194 isParatext "false" @default.