Unsupervised Anomaly Detection Using HDG-Clustering Algorithm

  • Authors:
  • Cheng-Fa Tsai;Chia-Chen Yen

  • Affiliations:
  • Department of Management Information Systems, National Pingtung University of Science and Technology, Pingtung, Taiwan 91201;Department of Management Information Systems, National Pingtung University of Science and Technology, Pingtung, Taiwan 91201

  • Venue:
  • Neural Information Processing
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

As intrusion posing a serious security threat in network environments, many network intrusion detection schemes have been proposed in recent years. Most such methods employ signature-based or data-mining based techniques that rely on labeled training data, but cannot detect new types of attacks. Anomaly detection techniques can be adopted to solve this problem with purely normal data. However, extracting these data is a very costly task. Unlike the approaches that rely on labeled data or purely normal data, unsupervised anomaly detection can discover "unseen" attacks by unlabeled data. This investigation presents a new mixed clustering algorithm named HDG-Clustering for unsupervised anomaly detection. The proposed algorithm is evaluated using the 1999 KDD Cup data set. Experimental results indicate that the proposed approach outperforms several existing techniques.