• 제목/요약/키워드: hybrid detection

검색결과 443건 처리시간 0.028초

An Effective Anomaly Detection Approach based on Hybrid Unsupervised Learning Technologies in NIDS

  • Kangseok Kim
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제18권2호
    • /
    • pp.494-510
    • /
    • 2024
  • Internet users are exposed to sophisticated cyberattacks that intrusion detection systems have difficulty detecting. Therefore, research is increasing on intrusion detection methods that use artificial intelligence technology for detecting novel cyberattacks. Unsupervised learning-based methods are being researched that learn only from normal data and detect abnormal behaviors by finding patterns. This study developed an anomaly-detection method based on unsupervised machines and deep learning for a network intrusion detection system (NIDS). We present a hybrid anomaly detection approach based on unsupervised learning techniques using the autoencoder (AE), Isolation Forest (IF), and Local Outlier Factor (LOF) algorithms. An oversampling approach that increased the detection rate was also examined. A hybrid approach that combined deep learning algorithms and traditional machine learning algorithms was highly effective in setting the thresholds for anomalies without subjective human judgment. It achieved precision and recall rates respectively of 88.2% and 92.8% when combining two AEs, IF, and LOF while using an oversampling approach to learn more unknown normal data improved the detection accuracy. This approach achieved precision and recall rates respectively of 88.2% and 94.6%, further improving the detection accuracy compared with the hybrid method. Therefore, in NIDS the proposed approach provides high reliability for detecting cyberattacks.

융합형 필터를 이용한 깊이 영상 기반 특징점 검출 기법 (Depth Image Based Feature Detection Method Using Hybrid Filter)

  • 전용태;이현;최재성
    • 대한임베디드공학회논문지
    • /
    • 제12권6호
    • /
    • pp.395-403
    • /
    • 2017
  • Image processing for object detection and identification has been studied for supply chain management application with various approaches. Among them, feature pointed detection algorithm is used to track an object or to recognize a position in automated supply chain systems and a depth image based feature point detection is recently highlighted in the application. The result of feature point detection is easily influenced by image noise. Also, the depth image has noise itself and it also affects to the accuracy of the detection results. In order to solve these problems, we propose a novel hybrid filtering mechanism for depth image based feature point detection, it shows better performance compared with conventional hybrid filtering mechanism.

Hybrid Model Based Intruder Detection System to Prevent Users from Cyber Attacks

  • Singh, Devendra Kumar;Shrivastava, Manish
    • International Journal of Computer Science & Network Security
    • /
    • 제21권4호
    • /
    • pp.272-276
    • /
    • 2021
  • Presently, Online / Offline Users are facing cyber attacks every day. These cyber attacks affect user's performance, resources and various daily activities. Due to this critical situation, attention must be given to prevent such users through cyber attacks. The objective of this research paper is to improve the IDS systems by using machine learning approach to develop a hybrid model which controls the cyber attacks. This Hybrid model uses the available KDD 1999 intrusion detection dataset. In first step, Hybrid Model performs feature optimization by reducing the unimportant features of the dataset through decision tree, support vector machine, genetic algorithm, particle swarm optimization and principal component analysis techniques. In second step, Hybrid Model will find out the minimum number of features to point out accurate detection of cyber attacks. This hybrid model was developed by using machine learning algorithms like PSO, GA and ELM, which trained the system with available data to perform the predictions. The Hybrid Model had an accuracy of 99.94%, which states that it may be highly useful to prevent the users from cyber attacks.

Hybrid bolt-loosening detection in wind turbine tower structures by vibration and impedance responses

  • Nguyen, Tuan-Cuong;Huynh, Thanh-Canh;Yi, Jin-Hak;Kim, Jeong-Tae
    • Wind and Structures
    • /
    • 제24권4호
    • /
    • pp.385-403
    • /
    • 2017
  • In recent years, the wind energy has played an increasingly important role in national energy sector of many countries. To harvest more electric power, the wind turbine (WT) tower structure becomes physically larger, which may cause more risks during long-term operation. Associated with the great development of WT projects, the number of accidents related to large-scaled WT has also been increased. Therefore, a structural health monitoring (SHM) system for WT structures is needed to ensure their safety and serviceability during operational time. The objective of this study is to develop a hybrid damage detection method for WT tower structures by measuring vibration and impedance responses. To achieve the objective, the following approaches are implemented. Firstly, a hybrid damage detection scheme which combines vibration-based and impedance-based methods is proposed as a sequential process in three stages. Secondly, a series of vibration and impedance tests are conducted on a lab-scaled model of the WT structure in which a set of bolt-loosening cases is simulated for the segmental joints. Finally, the feasibility of the proposed hybrid damage detection method is experimentally evaluated via its performance during the damage detection process in the tested model.

Hybrid Projection 함수와 Rank Order 필터를 이용한 눈동자 검출 (Pupil Detection using Hybrid Projection Function and Rank Order Filter)

  • 장경식
    • 한국컴퓨터정보학회논문지
    • /
    • 제19권8호
    • /
    • pp.27-34
    • /
    • 2014
  • 이 논문에서는 hybrid projection 함수와 rank order 필터를 이용하여 눈동자를 검출하는 방법을 제안한다. 눈썹을 눈동자로 검출하는 오류를 줄이기 위하여, hybrid projection 함수를 이용하여 얼굴 영역에서 눈썹을 검출하고 눈썹이 포함되지 않도록 눈 영역을 설정한다. 눈 영역에서 rank order 필터를 사용하여 눈동자 후보점을 찾고 위치를 보정한다. 두 눈동자 후보점을 기하학적인 제약조건을 기반으로 쌍으로 묶고 각 쌍의 두 눈에 대한 유사도를 정합을 이용하여 측정하여가장작은값을 갖는 쌍을 최종눈동자로 결정한다. BioID 얼굴데이터베이스의 얼굴 영상 700개에 대한 실험 결과 92.4%의 검출율을 얻었으며 기존 방법보다 약 21.5% 개선된 결과를 얻었다.

나이브 베이지안과 데이터 마이닝을 이용한 FHIDS(Fuzzy Logic based Hybrid Intrusion Detection System) 설계 (A Design of FHIDS(Fuzzy logic based Hybrid Intrusion Detection System) using Naive Bayesian and Data Mining)

  • 이병관;정은희
    • 한국정보전자통신기술학회논문지
    • /
    • 제5권3호
    • /
    • pp.158-163
    • /
    • 2012
  • 본 논문에서 나이브 베이지안 알고리즘, 데이터 마이닝, Fuzzy logic을 이용하여 이상 공격과 오용 공격을 탐지하는 하이브리드 침입탐지시스템인 FHIDS(Fuzzy logic based Hybrid Intrusion Detection System)을 설계하였다. 본 논문에서 설계한 FHIDS의 NB-AAD(Naive Bayesian based Anomaly Attack Detection)기법은 나이브 베이지안 알고리즘을 이용해 이상 공격을 탐지하고, DM-MAD(Data Mining based Misuse Attack Detection)기법은 데이터 마이닝 알고리즘을 이용하여 패킷들의 연관 규칙을 분석하여 새로운 규칙기반 패턴을 생성하거나 변형된 규칙 기반 패턴을 추출함으로써, 새로운 공격이나 변형된 공격을 탐지한다. 그리고 FLD(Fuzzy Logic based Decision)은 NB-AAD과 DM-MAD의 결과를 이용하여 정상인지 공격인지를 판별한다. 즉, FHIDS는 이상과 오용공격을 탐지 가능하며 False Positive 비율을 감소시키고, 변형 공격 탐지율을 개선한 하이브리드 공격탐지시스템이다.

악성 URL 탐지를 위한 URL Lexical Feature 기반의 DL-ML Fusion Hybrid 모델 (DL-ML Fusion Hybrid Model for Malicious Web Site URL Detection Based on URL Lexical Features)

  • 김대엽
    • 정보보호학회논문지
    • /
    • 제33권6호
    • /
    • pp.881-891
    • /
    • 2023
  • 최근에는 인공지능을 활용하여 악성 URL을 탐지하는 다양한 연구가 진행되고 있으며, 대부분의 연구 결과에서 높은 탐지 성능을 보였다. 그러나 고전 머신러닝을 활용하는 경우 feature를 분석하고 선별해야 하는 추가 비용이 발생하며, 데이터 분석가의 역량에 따라 탐지 성능이 결정되는 이슈가 있다. 본 논문에서는 이러한 이슈를 해결하기 위해 URL lexical feature를 자동으로 추출하는 딥러닝 모델의 일부가 고전 머신러닝 모델에 결합된 형태인 DL-ML Fusion Hybrid 모델을 제안한다. 제안한 모델로 직접 수집한 총 6만 개의 악성과 정상 URL을 학습한 결과 탐지 성능이 최대 23.98%p 향상되었을 뿐만 아니라, 자동화된 feature engineering을 통해 효율적인 기계학습이 가능하였다.

다중채널 선형등화기를 이용한 혼합 TDMA/CDMA 시스템의 성능개선 (Performance Improvement of A Hybrid TDMA/CDMA Systems with Multi-channel Linear Equalizer)

  • 김응배
    • 한국통신학회논문지
    • /
    • 제25권9A호
    • /
    • pp.1273-1281
    • /
    • 2000
  • In this paper we studied for multi-user detection system, which hold the merit of CDMA system and can enhance the system capacity. We designed actually realizable quasi-optimal multiuser detection system by use of linear equalizer on the concept that multiuser detection algorithm can be reduced by combining TDMA with CDMA. we call this the hybrid TDMA/CDMA system. And we proposed multiuser detection system, which can use PSAD and MSDD channel estimation method. As a result of performance analysis we acquired equal or much better performance by use of linear multichannel equalizer in the case of not so many user. And on the occasion of many user within cell we can also acquired much better performance in comparison with conventional single user detection system by use of hybrid TDMA/CDMA system.

  • PDF

자가적응모듈과 퍼지인식도가 적용된 하이브리드 침입시도탐지모델 (An Hybrid Probe Detection Model using FCM and Self-Adaptive Module)

  • 이세열
    • 디지털산업정보학회논문지
    • /
    • 제13권3호
    • /
    • pp.19-25
    • /
    • 2017
  • Nowadays, networked computer systems play an increasingly important role in our society and its economy. They have become the targets of a wide array of malicious attacks that invariably turn into actual intrusions. This is the reason computer security has become an essential concern for network administrators. Recently, a number of Detection/Prevention System schemes have been proposed based on various technologies. However, the techniques, which have been applied in many systems, are useful only for the existing patterns of intrusion. Therefore, probe detection has become a major security protection technology to detection potential attacks. Probe detection needs to take into account a variety of factors ant the relationship between the various factors to reduce false negative & positive error. It is necessary to develop new technology of probe detection that can find new pattern of probe. In this paper, we propose an hybrid probe detection using Fuzzy Cognitive Map(FCM) and Self Adaptive Module(SAM) in dynamic environment such as Cloud and IoT. Also, in order to verify the proposed method, experiments about measuring detection rate in dynamic environments and possibility of countermeasure against intrusion were performed. From experimental results, decrease of false detection and the possibilities of countermeasures against intrusions were confirmed.

눈 검출에서의 픽셀 선택을 이용한 신뢰 척도 (A New Confidence Measure for Eye Detection Using Pixel Selection)

  • 이용걸;최상일
    • 정보처리학회논문지:소프트웨어 및 데이터공학
    • /
    • 제4권7호
    • /
    • pp.291-296
    • /
    • 2015
  • 본 논문에서는, 눈 검출에서의 픽셀 선택 방법을 이용한 편향 판별 분석(BDA) 기반의 신뢰 척도를 제안하고 이를 이용하여 hybrid 눈 검출기를 설계한다. 이를 위해 눈 조각 영상에서 먼저 판별 분석에 유용한 픽셀들을 선택하여 부분 영상을 만들고, 부분 영상에 BDA를 적용하여 신뢰 척도를 위한 특징 공간을 구성한다. Hybrid 눈 검출기를 구성하는 기본 검출기로는 상호 보완적인 특성을 가진 HFED와 MFED를 사용하였다. 주어진 영상에 대해, 기본 검출기들에 의해 생성된 눈 좌표를 가지고 생성한 눈 조각 영상의 부분 영상들을 BDA 특징공간에 투영하여 positive 샘플의 평균과의 거리를 측정함으로써 그 정확성을 측정하고, 기본 검출기의 결과들 중에서 신뢰도가 높은 결과를 최종 눈 검출 결과로 사용한다. 다양한 얼굴 데이터베이스들에 대한 실험 결과에서, 제안한 방법은 검출된 눈 좌표의 정확도 측면에서 뿐만 아니라 검출된 눈 좌표를 이용한 얼굴 인식 성능에서도 다른 방법들보다 우수한 결과를 나타내었다.