Exploring Information Centrality for Intrusion Detection in Large Networks

04/27/2019
by   Nidhi Rastogi, et al.
0

Modern networked systems are constantly under threat from systemic attacks. There has been a massive upsurge in the number of devices connected to a network as well as the associated traffic volume. This has intensified the need to better understand all possible attack vectors during system design and implementation. Further, it has increased the need to mine large data sets, analyzing which has become a daunting task. It is critical to scale monitoring infrastructures to match this need, but a difficult goal for the small and medium organization. Hence, there is a need to propose novel approaches that address the big data problem in security. Information Centrality (IC) labels network nodes with better vantage points for detecting network-based anomalies as central nodes and uses them for detecting a category of attacks called systemic attacks. The main idea is that since these central nodes already see a lot of information flowing through the network, they are in a good position to detect anomalies before other nodes. This research first dives into the importance of using graphs in understanding the topology and information flow. We then introduce the usage of information centrality, a centrality-based index, to reduce data collection in existing communication networks. Using IC-identified central nodes can accelerate outlier detection when armed with a suitable anomaly detection technique. We also come up with a more efficient way to compute Information centrality for large networks. Finally, we demonstrate that central nodes detect anomalous behavior much faster than other non-central nodes, given the anomalous behavior is systemic in nature.

READ FULL TEXT
POST COMMENT

Comments

There are no comments yet.

Authors

page 1

page 2

page 3

page 4

08/02/2012

A hybrid artificial immune system and Self Organising Map for network intrusion detection

Network intrusion detection is the problem of detecting unauthorised use...
03/15/2019

GEE: A Gradient-based Explainable Variational Autoencoder for Network Anomaly Detection

This paper looks into the problem of detecting network anomalies by anal...
12/21/2020

Unsupervised Anomaly Detectors to Detect Intrusions in the Current Threat Landscape

Anomaly detection aims at identifying unexpected fluctuations in the exp...
10/21/2019

GraphSAC: Detecting anomalies in large-scale graphs

A graph-based sampling and consensus (GraphSAC) approach is introduced t...
04/02/2019

Active Learning for Network Intrusion Detection

Network operators are generally aware of common attack vectors that they...
06/06/2021

Multilayer Representation and Multiscale Analysis on Data Networks

The constant increase in the complexity of data networks motivates the s...
08/16/2018

Why did the shape of your network change? (On detecting network anomalies via non-local curvatures)

Anomaly detection problems (also called change-point detection problems)...
This week in AI

Get the week's most popular data science and artificial intelligence research sent straight to your inbox every Saturday.