Improving SSH detection model using IPA time and WGAN-GP
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Lee, Junwon | - |
dc.contributor.author | Lee, Heejo | - |
dc.date.accessioned | 2022-05-17T03:42:38Z | - |
dc.date.available | 2022-05-17T03:42:38Z | - |
dc.date.created | 2022-05-17 | - |
dc.date.issued | 2022-05 | - |
dc.identifier.issn | 0167-4048 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/141083 | - |
dc.description.abstract | In the machine learning-based detection model, the detection accuracy tends to be proportional to the quantity and quality of the training dataset. The machine learning-based SSH detection model's performance is affected by the size of the training dataset and the ratio of target classes. However, in an actual network environment within a short period, it is inconvenient to collect a sufficient and diverse training dataset. Even though many training data samples are collected, it takes a lot of effort and time to prepare the training dataset through data classification. To overcome these limitations, we generate sophisticated samples using the WGAN-GP algorithm and present how to select samples by comparing generator loss. The synthetic training dataset with generated samples improves the performance of the SSH detection model. Furthermore, we add the new features to include the distinction of inter-packet arrival time. The enhanced SSH detection model decreases false positives and provides a 0.999 F 1-score by applying the synthetic dataset and the packet inter-arrival time features.& nbsp;(c) 2022 Elsevier Ltd. All rights reserved. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | ELSEVIER ADVANCED TECHNOLOGY | - |
dc.title | Improving SSH detection model using IPA time and WGAN-GP | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Heejo | - |
dc.identifier.doi | 10.1016/j.cose.2022.102672 | - |
dc.identifier.scopusid | 2-s2.0-85125749928 | - |
dc.identifier.wosid | 000776078400009 | - |
dc.identifier.bibliographicCitation | COMPUTERS & SECURITY, v.116 | - |
dc.relation.isPartOf | COMPUTERS & SECURITY | - |
dc.citation.title | COMPUTERS & SECURITY | - |
dc.citation.volume | 116 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.subject.keywordAuthor | GAN | - |
dc.subject.keywordAuthor | WGAN-GP | - |
dc.subject.keywordAuthor | SSH detection | - |
dc.subject.keywordAuthor | Inter -packet arrival time | - |
dc.subject.keywordAuthor | Session -based data | - |
dc.subject.keywordAuthor | Random forest | - |
dc.subject.keywordAuthor | Generator loss | - |
dc.subject.keywordAuthor | PCA | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.