By Topic

Anomaly Intrusion Detection System Using Gaussian Mixture Model

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$33 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

2 Author(s)
M. Bahrololum ; Iran Telecommun. Res. Center, Tehran ; M. Khaleghi

Intrusion detection systems have been widely used to overcome security threats in computer networks and to identify unauthorized use, misuse, and abuse of computer systems. Anomaly-based approaches in intrusion detection systems have the advantage of being able to detect unknown attacks; they look for patterns that deviate from the normal behavior. We have proposed an approach of anomaly intrusion detection system by using Gaussian mixture model. This method learns patterns of normal and intrusive activities to classify that use a set of Gaussian probability distribution functions. The use of maximum likelihood in detection phase has used the deviation between current and reference behavior. GMM is evaluated by dataset KDD99 without any special hardware requirements. Experimental results show that this method is able to reducing the missing alarm. Moreover, this model is a fast method for detecting the unknown attacks.

Published in:

Convergence and Hybrid Information Technology, 2008. ICCIT '08. Third International Conference on  (Volume:1 )

Date of Conference:

11-13 Nov. 2008