Skip navigation
Use este identificador para citar ou linkar para este item: http://repositorio.unb.br/handle/10482/10985
Arquivos associados a este item:
Arquivo Descrição TamanhoFormato 
ARTIGO_ParallelApproachPCA.pdf1,22 MBAdobe PDFVisualizar/Abrir
Registro completo de metadados
Campo DCValorIdioma
dc.contributor.authorDavid, Bernardo Machado-
dc.contributor.authorCosta, João Paulo Carvalho Lustosa da-
dc.contributor.authorNascimento, Anderson Clayton Alves-
dc.contributor.authorHoltz, Marcelo Dias-
dc.contributor.authorAmaral, Dino Macedo-
dc.contributor.authorSousa Júnior, Rafael Timóteo de-
dc.date.accessioned2012-07-18T13:27:57Z-
dc.date.available2012-07-18T13:27:57Z-
dc.date.issued2011-
dc.identifier.citationDAVID, Bernardo Machado et al. A parallel approach to pca based malicious activitydetection in distributed honeypot data. The International Journal of Forensic Computer Science, v. 6, n. 1, p. 8-27, 2011. Disponível em:<http://www.ijofcs.org/abstract-v06n1-pp01.html>. Acesso em: 19 jun. 2012. doi: 10.5769/J201101001.en
dc.identifier.urihttp://repositorio.unb.br/handle/10482/10985-
dc.description.abstractModel order selection (MOS) schemes, which are frequently employed inseveral signal processing applications, are shown to be effective tools for the detectionof malicious activities in honeypot data. In this paper, we extend previous results byproposing an efficient and parallel MOS method for blind automatic malicious activitydetection in distributed honeypots. Our proposed scheme does not require any previousinformation on attacks or human intervention. We model network traffic data as signalsand noise and then apply modified signal processing methods. However, differently fromthe previous centralized solutions, we propose that the data colected by each honeypotnode be processed by nodes in a cluster (that may consist of the collection nodesthemselves) and then grouped to obtain the final results. This is achieved by having eachnode locally compute the Eigenvalue Decomposition (EVD) to its own sample correlationmatrix (obtained from the honeypot data) and transmit the resulting eigenvalues to acentral node, where the global eigenvalues and final model order are computed. Themodel order computed from the global eigenvalues through RADOI represents the numberof malicious activities detected in the analysed data. The feasibility of the proposedapproach is demonstrated through simulation experiments.en
dc.language.isoInglêsen
dc.publisherBrazilian Association of High Technology Experts (ABEAT)en
dc.rightsAcesso Abertoen
dc.titleA parallel approach to pca based malicious activitydetection in distributed honeypot dataen
dc.typeArtigoen
dc.subject.keywordAlgoritmos de computador - criptografia de dados (Computação)en
dc.subject.keywordCompressão de dados (Computação)en
dc.subject.keywordComputadores - medidas de segurançaen
dc.subject.keywordHackersen
dc.rights.licenseThe International Journal of Forensic Computer Science - Disponível sob Licença Creative Commons 3.0, que permite copiar, distribuir e transmitir o trabalho, desde que seja citado o autor e licenciante. Não permite o uso para fins comerciais nem a adaptação desta.en
dc.identifier.doihttps://dx.doi.org/10.5769/J201101001en
Aparece nas coleções:Artigos publicados em periódicos e afins

Mostrar registro simples do item Visualizar estatísticas



Este item está licenciada sob uma Licença Creative Commons Creative Commons