Framework for identifying network attacks through packet inspection using machine learning

In every network, traffic anomaly detection system is an essential field of study. In the communication system, there are various protocols and intrusions. It is still a testing area to find high precision to boost the correct distribution ratio. Many authors have worked on various algorithms such a...

Full description

Bibliographic Details
Main Authors: Shanker Ravi, Agrawal Prateek, Singh Aman, Bhatt Mohammed Wasim
Format: Article
Language:English
Published: De Gruyter 2023-07-01
Series:Nonlinear Engineering
Subjects:
Online Access:https://doi.org/10.1515/nleng-2022-0297
_version_ 1797693192484683776
author Shanker Ravi
Agrawal Prateek
Singh Aman
Bhatt Mohammed Wasim
author_facet Shanker Ravi
Agrawal Prateek
Singh Aman
Bhatt Mohammed Wasim
author_sort Shanker Ravi
collection DOAJ
description In every network, traffic anomaly detection system is an essential field of study. In the communication system, there are various protocols and intrusions. It is still a testing area to find high precision to boost the correct distribution ratio. Many authors have worked on various algorithms such as simple classification, K-Means, Genetic Algorithm, and Support Vector Machine approaches, and they presented the efficiency and accuracy of these algorithms. In this article, we have proposed a feature extraction technique known as “k-means clustering,” which has its roots in signal processing and is employed to divide a set of n observations into k clusters, each of which has its origin from the observation with the closest mean. K-Means method is applied in this study to investigate the stream and its implementation and applications using Python and the dataset on the KDDcup99. The effectiveness of the outcome indicates the planned work’s efficiency in relation to other widely available alternatives. Apart from the applied method, a web-based framework is designed, which can inspect an actual network traffic packet for identifying network attacks. Instead of using a static file for testing the network attack, a web page-based solution uses database to collect and test the information. Real-time packet inspection is provided in the proposed work for identifying new attacks.
first_indexed 2024-03-12T02:39:59Z
format Article
id doaj.art-2135594a47ac41f68f85c316c614bd67
institution Directory Open Access Journal
issn 2192-8029
language English
last_indexed 2024-03-12T02:39:59Z
publishDate 2023-07-01
publisher De Gruyter
record_format Article
series Nonlinear Engineering
spelling doaj.art-2135594a47ac41f68f85c316c614bd672023-09-04T07:10:07ZengDe GruyterNonlinear Engineering2192-80292023-07-01121233010.1515/nleng-2022-0297Framework for identifying network attacks through packet inspection using machine learningShanker Ravi0Agrawal Prateek1Singh Aman2Bhatt Mohammed Wasim3Department of Computer Science and Engineering, Lovely Professional University, Phagwara, Punjab 144411, IndiaDepartment of Computer Science and Engineering, Lovely Professional University, Phagwara, Punjab 144411, IndiaDepartment of Computer Science and Engineering, Lovely Professional University, Phagwara, Punjab 144411, IndiaDepartment of Computer Science Engineering, Model Institute of Engineering and Technology, Jammu, J&K, IndiaIn every network, traffic anomaly detection system is an essential field of study. In the communication system, there are various protocols and intrusions. It is still a testing area to find high precision to boost the correct distribution ratio. Many authors have worked on various algorithms such as simple classification, K-Means, Genetic Algorithm, and Support Vector Machine approaches, and they presented the efficiency and accuracy of these algorithms. In this article, we have proposed a feature extraction technique known as “k-means clustering,” which has its roots in signal processing and is employed to divide a set of n observations into k clusters, each of which has its origin from the observation with the closest mean. K-Means method is applied in this study to investigate the stream and its implementation and applications using Python and the dataset on the KDDcup99. The effectiveness of the outcome indicates the planned work’s efficiency in relation to other widely available alternatives. Apart from the applied method, a web-based framework is designed, which can inspect an actual network traffic packet for identifying network attacks. Instead of using a static file for testing the network attack, a web page-based solution uses database to collect and test the information. Real-time packet inspection is provided in the proposed work for identifying new attacks.https://doi.org/10.1515/nleng-2022-0297anomalynetwork layerpacketsdosidsattacksmachine learningkddcup99knnk-means.
spellingShingle Shanker Ravi
Agrawal Prateek
Singh Aman
Bhatt Mohammed Wasim
Framework for identifying network attacks through packet inspection using machine learning
Nonlinear Engineering
anomaly
network layer
packets
dos
ids
attacks
machine learning
kddcup99
knn
k-means.
title Framework for identifying network attacks through packet inspection using machine learning
title_full Framework for identifying network attacks through packet inspection using machine learning
title_fullStr Framework for identifying network attacks through packet inspection using machine learning
title_full_unstemmed Framework for identifying network attacks through packet inspection using machine learning
title_short Framework for identifying network attacks through packet inspection using machine learning
title_sort framework for identifying network attacks through packet inspection using machine learning
topic anomaly
network layer
packets
dos
ids
attacks
machine learning
kddcup99
knn
k-means.
url https://doi.org/10.1515/nleng-2022-0297
work_keys_str_mv AT shankerravi frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning
AT agrawalprateek frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning
AT singhaman frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning
AT bhattmohammedwasim frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning