Framework for identifying network attacks through packet inspection using machine learning
In every network, traffic anomaly detection system is an essential field of study. In the communication system, there are various protocols and intrusions. It is still a testing area to find high precision to boost the correct distribution ratio. Many authors have worked on various algorithms such a...
Main Authors: | , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
De Gruyter
2023-07-01
|
Series: | Nonlinear Engineering |
Subjects: | |
Online Access: | https://doi.org/10.1515/nleng-2022-0297 |
_version_ | 1797693192484683776 |
---|---|
author | Shanker Ravi Agrawal Prateek Singh Aman Bhatt Mohammed Wasim |
author_facet | Shanker Ravi Agrawal Prateek Singh Aman Bhatt Mohammed Wasim |
author_sort | Shanker Ravi |
collection | DOAJ |
description | In every network, traffic anomaly detection system is an essential field of study. In the communication system, there are various protocols and intrusions. It is still a testing area to find high precision to boost the correct distribution ratio. Many authors have worked on various algorithms such as simple classification, K-Means, Genetic Algorithm, and Support Vector Machine approaches, and they presented the efficiency and accuracy of these algorithms. In this article, we have proposed a feature extraction technique known as “k-means clustering,” which has its roots in signal processing and is employed to divide a set of n observations into k clusters, each of which has its origin from the observation with the closest mean. K-Means method is applied in this study to investigate the stream and its implementation and applications using Python and the dataset on the KDDcup99. The effectiveness of the outcome indicates the planned work’s efficiency in relation to other widely available alternatives. Apart from the applied method, a web-based framework is designed, which can inspect an actual network traffic packet for identifying network attacks. Instead of using a static file for testing the network attack, a web page-based solution uses database to collect and test the information. Real-time packet inspection is provided in the proposed work for identifying new attacks. |
first_indexed | 2024-03-12T02:39:59Z |
format | Article |
id | doaj.art-2135594a47ac41f68f85c316c614bd67 |
institution | Directory Open Access Journal |
issn | 2192-8029 |
language | English |
last_indexed | 2024-03-12T02:39:59Z |
publishDate | 2023-07-01 |
publisher | De Gruyter |
record_format | Article |
series | Nonlinear Engineering |
spelling | doaj.art-2135594a47ac41f68f85c316c614bd672023-09-04T07:10:07ZengDe GruyterNonlinear Engineering2192-80292023-07-01121233010.1515/nleng-2022-0297Framework for identifying network attacks through packet inspection using machine learningShanker Ravi0Agrawal Prateek1Singh Aman2Bhatt Mohammed Wasim3Department of Computer Science and Engineering, Lovely Professional University, Phagwara, Punjab 144411, IndiaDepartment of Computer Science and Engineering, Lovely Professional University, Phagwara, Punjab 144411, IndiaDepartment of Computer Science and Engineering, Lovely Professional University, Phagwara, Punjab 144411, IndiaDepartment of Computer Science Engineering, Model Institute of Engineering and Technology, Jammu, J&K, IndiaIn every network, traffic anomaly detection system is an essential field of study. In the communication system, there are various protocols and intrusions. It is still a testing area to find high precision to boost the correct distribution ratio. Many authors have worked on various algorithms such as simple classification, K-Means, Genetic Algorithm, and Support Vector Machine approaches, and they presented the efficiency and accuracy of these algorithms. In this article, we have proposed a feature extraction technique known as “k-means clustering,” which has its roots in signal processing and is employed to divide a set of n observations into k clusters, each of which has its origin from the observation with the closest mean. K-Means method is applied in this study to investigate the stream and its implementation and applications using Python and the dataset on the KDDcup99. The effectiveness of the outcome indicates the planned work’s efficiency in relation to other widely available alternatives. Apart from the applied method, a web-based framework is designed, which can inspect an actual network traffic packet for identifying network attacks. Instead of using a static file for testing the network attack, a web page-based solution uses database to collect and test the information. Real-time packet inspection is provided in the proposed work for identifying new attacks.https://doi.org/10.1515/nleng-2022-0297anomalynetwork layerpacketsdosidsattacksmachine learningkddcup99knnk-means. |
spellingShingle | Shanker Ravi Agrawal Prateek Singh Aman Bhatt Mohammed Wasim Framework for identifying network attacks through packet inspection using machine learning Nonlinear Engineering anomaly network layer packets dos ids attacks machine learning kddcup99 knn k-means. |
title | Framework for identifying network attacks through packet inspection using machine learning |
title_full | Framework for identifying network attacks through packet inspection using machine learning |
title_fullStr | Framework for identifying network attacks through packet inspection using machine learning |
title_full_unstemmed | Framework for identifying network attacks through packet inspection using machine learning |
title_short | Framework for identifying network attacks through packet inspection using machine learning |
title_sort | framework for identifying network attacks through packet inspection using machine learning |
topic | anomaly network layer packets dos ids attacks machine learning kddcup99 knn k-means. |
url | https://doi.org/10.1515/nleng-2022-0297 |
work_keys_str_mv | AT shankerravi frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning AT agrawalprateek frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning AT singhaman frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning AT bhattmohammedwasim frameworkforidentifyingnetworkattacksthroughpacketinspectionusingmachinelearning |