18th IEEE International Conference on Tools with Artificial Intelligence (ICTAI'06)
UNPCC: A Novel Unsupervised Classification Scheme for Network Intrusion Detection
Arlington, Virginia
November 13-November 15
ISBN: 0-7695-2728-0
The development of effective classification techniques, particularly unsupervised classification, is important for real-world applications since information about the training data before classification is relatively unknown. In this paper, a novel unsupervised classification algorithm is proposed to meet the increasing demand in the domain of network intrusion detection. Our proposed UNPCC (Unsupervised Principal Component Classifier) algorithm is a multi-class unsupervised classifier with absolutely no requirements for any a priori class related data information (e.g., the number of classes and the maximum number of instances belonging to each class), and an inherently natural supervised classification scheme, both which present high detection rates and several operational advantages (e.g., lower training time, lower classification time, lower processing power requirement, and lower memory requirement). Experiments have been conducted with the KDD Cup 99 data and network traffic data simulated from our private network testbed, and the promising results demonstrate that our UNPCC algorithm outperforms several well-known supervised and unsupervised classification algorithms.
Citation:
Zongxing Xie, Thiago Quirino, Mei-Ling Shyu, Shu-Ching Chen, LiWu Chang, "UNPCC: A Novel Unsupervised Classification Scheme for Network Intrusion Detection," ictai, pp.743-750, 18th IEEE International Conference on Tools with Artificial Intelligence (ICTAI'06), 2006