PCA mix‐based Hotelling's T<sup>2</sup>multivariate control charts for intrusion detection system

Mo, Shaohui; Tuerhong, Gulanbaier; Wushouer, Mairidan; Yibulayin, Tuergen

doi:10.1049/ise2.12051

Cited by 8 publications

(4 citation statements)

References 46 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Te combination of the PKE system (key generation 1, encryption, and decryption) and public key signature system (key generation 2, signature, and verifcation) is the CPK cryptosystem (key generation, encryption, decryption, signature, and verifcation). Here, the encryption and decryption algorithms are the original algorithms of the PKE system before combination [17]. Similarly, the signature and verifcation algorithm is the original algorithm of the precombination public-key signature system.…”

Section: Literature Reviewmentioning

confidence: 99%

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

Lin

Geng

2023

Journal of Electrical and Computer Engineering

View full text Add to dashboard Cite

This work aims to solve the specific problem in the Power Internet of Things (PIoT). PIoT is vulnerable to monitoring, tampering, forgery, and other attacks during frequent data interaction under the background of big data, leading to a severe threat to the power grid’s Information Security (ISEC). Cryptosystems can solve ISEC problems, such as confidentiality, data integrity, authentication, identity recognition, data control, and nonrepudiation. Thereupon, this work expounds on cryptography from public-key encryption and digital signature and puts forward the model of network information attack. Then, the security of the two cryptograms is certified against the two cyberattack modes. On this basis, an Identity-based Combined Encryption and Signature (IBCES) ensemble scheme is proposed by combining public-key encryption with the digital signature. Finally, the security of the proposed IBCES’s encryption and the signature schemes is verified, and the results prove their feasibility. The results show that the proposed IBCEs are effective and feasible, fully meeting the information confidentiality requirements. Additionally, smart grid against Information Security (ISEC) algorithms must comprehensively consider network resources and computing power. This work creatively combines the two cryptosystems. The proposal breaks the traditional key segmentation principle by applying the same key to different cryptosystems and ensures the independent security of the two cryptosystems. The conclusion provides technical support for future research on cryptography.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

Lin

Geng

2023

Journal of Electrical and Computer Engineering

View full text Add to dashboard Cite

show abstract

“…The PCA-based T 2 chart using the robust estimator fast minimum covariance determinant (FMCD) and KDE control limit a lower False Negative and higher accuracy than the other charts 24 . The PCA Mix and Kernel PCA (KPCA) Mix control chart perform better in detecting network anomalies than the other methods 25 , 26 .…”

Section: Introductionmentioning

confidence: 99%

Support vector data description with kernel density estimation (SVDD-KDE) control chart for network intrusion monitoring

Ahsan,

Khusna,

Wibawati

et al. 2023

Sci Rep

View full text Add to dashboard Cite

Multivariate control charts have been applied in many sectors. One of the sectors that employ this method is network intrusion detection. However, the issue arises when the conventional control chart faces difficulty monitoring the network-traffic data that do not follow a normal distribution as required. Consequently, more false alarms will be found when inspecting network traffic data. To settle this problem, support vector data description (SVDD) is suggested. The control chart based on the SVDD distance can be applied for the non-normal distribution, even the unknown distributions. Kernel density estimation (KDE) is the nonparametric approach that can be applied in estimating the control limit of the non-parametric control charts. Based on these facts, a multivariate chart based on the integrated SVDD and KDE (SVDD-KDE) is proposed to monitor the network's anomaly. Simulation using the synthetic dataset is performed to examine the performance of the SVDD-KDE chart in detecting multivariate data shifts and outliers. Based on the simulation results, the proposed method produces better performance in detecting shifts and higher accuracy in detecting outliers. Further, the proposed method is applied in the intrusion detection system (IDS) to monitor network attacks. The NSL-KDD data is analyzed as the benchmark dataset. A comparison between the SVDD-KDE chart with the other IDS-based-control chart and the machine learning algorithms is executed. Although the it has high computational cost, the results show that the IDS based on the SVDD-KDE chart produces a high accuracy at 0.917 and AUC at 0.915 with a low false positive rate compared to several algorithms.

show abstract

“…To counter these attacks, Intrusion Detection and Prevention Systems (IDPS) have emerged as a crucial tool in safeguarding networks [8]- [10]. These systems effectively detect and mitigate DDoS attacks to prevent service disruption and data compromise [11].…”

Section: Introductionmentioning

confidence: 99%

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Prabowo,

Fauziah,

Nahrowi

et al. 2023

IJACSA

View full text Add to dashboard Cite

This study aims to enhance network security by comprehensively evaluating various Intrusion Detection and Prevention Systems tools in networking systems. The objectives of this research were to assess the performance of different IDPS tools in terms of computer resources utilization, Quality of Service metrics namely delay, jitter, throughput, and packet loss, and their effectiveness in countering Distributed Denial of Service attacks, specifically ICMP Flood and SYN Flood. The evaluation used popular IDPS tools, including Snort, Suricata, Zeek, OSSEC, and Honeypot Cowrie. Real attack scenarios were simulated to measure the tools performance. The results indicated CPU and RAM usage variations among the tools, with Snort and Suricata showing efficient resource utilization. Regarding QoS metrics, Snort demonstrated superior performance in delay, jitter, throughput, and packet loss mitigation for both attack types. The implication for further research lies in exploring the optimal configurations and finetuning of IDPS tools to achieve the best possible network security against DDoS attacks. This research provides valuable insights into selecting appropriate IDPS tools for network administrators, cybersecurity professionals, and organizations to fortify their infrastructure against evolving cyber threats.

show abstract

PCA mix‐based Hotelling's T²multivariate control charts for intrusion detection system

Cited by 8 publications

References 46 publications

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

Support vector data description with kernel density estimation (SVDD-KDE) control chart for network intrusion monitoring

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Contact Info

Product

Resources

About

PCA mix‐based Hotelling's T2multivariate control charts for intrusion detection system

Cited by 8 publications

References 46 publications

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

Information Security Protection of Internet of Energy Using Ensemble Public Key Algorithm under Big Data

Support vector data description with kernel density estimation (SVDD-KDE) control chart for network intrusion monitoring

Strengthening Network Security: Evaluation of Intrusion Detection and Prevention Systems Tools in Networking Systems

Contact Info

Product

Resources

About

PCA mix‐based Hotelling's T²multivariate control charts for intrusion detection system