Name: Holistic Network Defense: Fusing Host and Network Features for Attack Classification (en Inglés)
Price: 1339.28 MXN
Availability: InStock
Author: Ji, Jenny W.
ISBN: 9781286862728

Envío gratis

portada Holistic Network Defense: Fusing Host and Network Features for Attack Classification (en Inglés)

Formato

Libro Físico

Autor

Jenny W. Ji

Editorial

Biblioscholar

Idioma

Inglés

N° páginas

126

Encuadernación

Tapa Blanda

Dimensiones

24.6 x 18.9 x 0.7 cm

Peso

0.24 kg.

ISBN13

9781286862728

Categorías

Educación

Holistic Network Defense: Fusing Host and Network Features for Attack Classification (en Inglés)

Jenny W. Ji (Autor) · Biblioscholar · Tapa Blanda

Libro Nuevo

$ 1,339.28

$ 2,435.06

Ahorras: $ 1,095.78

45% descuento

Envío normal

Origen: Estados Unidos (Costos de importación incluídos en el precio)

Se enviará desde nuestra bodega entre el Martes 30 de Julio y el Miércoles 07 de Agosto.

Lo recibirás en cualquier lugar de México entre 1 y 3 días hábiles luego del envío.

Reseña del libro "Holistic Network Defense: Fusing Host and Network Features for Attack Classification (en Inglés)"

This work presents a hybrid network-host monitoring strategy, which fuses data from both the network and the host to recognize malware infections. This work focuses on three categories: Normal, Scanning, and Infected. The network-host sensor fusion is accomplished by extracting 248 features from network traffic using the Fullstats Network Feature generator and from the host using text mining, looking at the frequency of the 500 most common strings and analyzing them as word vectors. Improvements to detection performance are made by synergistically fusing network features obtained from IP packet flows and host features, obtained from text mining port, processor, logon information among others. In addition, the work compares three different machine learning algorithms and updates the script required to obtain network features. Hybrid method results outperformed host only classification by 31.7% and network only classification by 25%. The new approach also reduces the number of alerts while remaining accurate compared with the commercial IDS SNORT. These results make it such that even the most typical users could understand alert classification messages.