Yousof Al-Hammadi
Performance evaluation of DCA and SRC on a single bot detection
Al-Hammadi, Yousof; Aickelin, Uwe; Greensmith, Julie
Abstract
Malicious users try to compromise systems using new techniques. One of the recent techniques used by the attacker is to perform complex distributed attacks such as denial of service and to obtain sensitive data such as password information. These compromised machines are said to be infected with malicious software termed a “bot”. In this paper, we investigate the correlation of behavioural attributes such as keylogging and packet flooding behaviour to detect the existence of a single bot on a compromised machine by applying (1) Spearman’s rank correlation
(SRC) algorithm and (2) the Dendritic Cell Algorithm (DCA). We also compare the output results generated from these two methods to the detection of a single bot. The results show that the DCA has a better performance in detecting malicious activities.
Citation
Al-Hammadi, Y., Aickelin, U., & Greensmith, J. (2010). Performance evaluation of DCA and SRC on a single bot detection
Journal Article Type | Article |
---|---|
Publication Date | Jan 1, 2010 |
Deposit Date | Aug 10, 2011 |
Publicly Available Date | Mar 28, 2024 |
Journal | Journal of Information Assurance and Security |
Electronic ISSN | 1554-1010 |
Peer Reviewed | Peer Reviewed |
Volume | 5 |
Issue | 1 |
Public URL | https://nottingham-repository.worktribe.com/output/1012271 |
Publisher URL | http://www.mirlabs.org/jias/index.html |
Files
al-hammadi2010b.pdf
(238 Kb)
PDF
You might also like
Migration threshold tuning in the deterministic dendritic cell algorithm
(2019)
Book Chapter
Theoretical formulation and analysis of the deterministic dendritic cell algorithm
(2013)
Journal Article
Quiet in class: classification, noise and the dendritic cell algorithm
(2011)
Journal Article
Downloadable Citations
About Repository@Nottingham
Administrator e-mail: digital-library-support@nottingham.ac.uk
This application uses the following open-source libraries:
SheetJS Community Edition
Apache License Version 2.0 (http://www.apache.org/licenses/)
PDF.js
Apache License Version 2.0 (http://www.apache.org/licenses/)
Font Awesome
SIL OFL 1.1 (http://scripts.sil.org/OFL)
MIT License (http://opensource.org/licenses/mit-license.html)
CC BY 3.0 ( http://creativecommons.org/licenses/by/3.0/)
Powered by Worktribe © 2024
Advanced Search