Netflow-Based Malware Detection and Data Visualisation System - Computer Information Systems and Industrial Management (CISIM 2017)
Conference Papers Year : 2017

Netflow-Based Malware Detection and Data Visualisation System

Abstract

This paper presents a system for network traffic visualisation and anomalies detection by means of data mining and machine learning techniques. First, this work describes and analyses existing solutions in the field of network anomalies detection in order to identify adapted techniques in that area. Afterwards, the system architecture and the adapted tools and libraries are presented. Particularly, two different anomalies detection methods are proposed.The key experiments and analysis focus on performance evaluation of the proposed algorithms. In particular, different setups are considered in order to evaluate such aspects as detection effectiveness and computational complexity.The obtained results are promising and show that the proposed system can be considered as a useful tool for the network administrator.
Fichier principal
Vignette du fichier
448933_1_En_56_Chapter.pdf (538.75 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01656262 , version 1 (05-12-2017)

Licence

Identifiers

Cite

Rafał Kozik, Robert Młodzikowski, Michał Choraś. Netflow-Based Malware Detection and Data Visualisation System. 16th IFIP International Conference on Computer Information Systems and Industrial Management (CISIM), Jun 2017, Bialystok, Poland. pp.652-660, ⟨10.1007/978-3-319-59105-6_56⟩. ⟨hal-01656262⟩
305 View
272 Download

Altmetric

Share

More