WEKO3
アイテム
Practical Operating Method for Intrusion Detection System Using Machine Learning and Visualization
http://hdl.handle.net/10212/2636
http://hdl.handle.net/10212/2636d89c5487-9375-4c75-99bd-fa1aa5eb19b1
| 名前 / ファイル | ライセンス | アクション |
|---|---|---|
全文 (6.3 MB)
|
|
|
|
内容・審査結果の要旨 (141.0 KB)
|
|
| Item type | 学位論文 / Thesis or Dissertation(1) | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| 公開日 | 2024-08-08 | |||||||||
| タイトル | ||||||||||
| タイトル | Practical Operating Method for Intrusion Detection System Using Machine Learning and Visualization | |||||||||
| 言語 | en | |||||||||
| その他のタイトル | ||||||||||
| その他のタイトル | 機械学習及び視覚化を用いた実用的なIDSの運用手法 | |||||||||
| 言語 | ja | |||||||||
| 作成者 |
木村, 知史
× 木村, 知史
|
|||||||||
| アクセス権 | ||||||||||
| アクセス権 | open access | |||||||||
| アクセス権URI | http://purl.org/coar/access_right/c_abf2 | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Intrusion Detection System | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Information Security | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Network Security | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Anomaly Detection | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Machine Learning | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Deep Learning | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Visualization | |||||||||
| 主題 | ||||||||||
| 言語 | en | |||||||||
| 主題Scheme | Other | |||||||||
| 主題 | Domain Name System | |||||||||
| 内容記述 | ||||||||||
| 内容記述タイプ | Abstract | |||||||||
| 内容記述 | Detecting cyber-attacks plays a crucial role in the modern network society. Intrusion Detection System (IDS) monitors a network activity consisting many protocols, and reports several alerts to an administrator when some anomaly alerts are caused. After receiving the alerts, the administrator can perform more detailed investigation to identify anomalies. However, IDS generates a large number of alerts. Although many researches to reduce a large number of alerts have been actively studied, developing the practical and useful operation for IDS is expected.In this thesis, we explore the practical operating method for IDS by using machine learning and visualization approaches. We found that many IDS alerts have three features : (1) Steady, (2) Periodicity, (3) Sudden mass detection. Utilizing these features, we first developed the visualization system emphasizing the anomaly alerts using past tendency, which allows the administrator to intuitively identify the network status and anomaly alerts. In addition, we developed the method for forecasting the alerts with high accuracy using the periodicity, which enables the administrator to identify the future trend of IDS alerts without analyzing the logs manually. Furthermore, we developed the method for forecasting Domain Name System (DNS) packets and detecting DNS attacks to identify the cause of anomaly at early stage with IDS alerts. These proposed methods that can be adopted to IDS alerts and DNS packets allow the administrator to identify the network status and the anomaly without analyzing the logs manually, in which we will greatly contribute to promote practical operating for IDS. | |||||||||
| 言語 | en | |||||||||
| 日付 | ||||||||||
| 日付 | 2021-03-25 | |||||||||
| 日付タイプ | Issued | |||||||||
| 言語 | ||||||||||
| 言語 | eng | |||||||||
| 資源タイプ | ||||||||||
| 資源タイプ識別子 | http://purl.org/coar/resource_type/c_db06 | |||||||||
| 資源タイプ | doctoral thesis | |||||||||
| 出版タイプ | ||||||||||
| 出版タイプ | VoR | |||||||||
| 出版タイプResource | http://purl.org/coar/version/c_970fb48d4fbd8a85 | |||||||||
| 学位授与番号 | ||||||||||
| 学位授与番号 | 甲第996号 | |||||||||
| 学位名 | ||||||||||
| 言語 | ja | |||||||||
| 学位名 | 博士（工学） | |||||||||
| 学位授与年月日 | ||||||||||
| 学位授与年月日 | 2021-03-25 | |||||||||
| 学位授与機関 | ||||||||||
| 学位授与機関識別子Scheme | kakenhi | |||||||||
| 学位授与機関識別子 | 14303 | |||||||||
| 言語 | ja | |||||||||
| 学位授与機関名 | 京都工芸繊維大学 | |||||||||
