IDEAS home Printed from https://ideas.repec.org/a/ids/ijdmmm/v16y2024i2p176-195.html
   My bibliography  Save this article

Intrusion detection system using statistical query tree with hierarchical clustering approach

Author

Listed:
  • P.V.N. Rajeswari
  • M. Shashi

Abstract

The internet has become a major part of everyone's life. When no proper protection is provided, intruders misuse the access provided by the internet, leading to an increased risk of sensitive data leakage. To have a trade-off between scalability and precision, this research introduces a novel two-stage screening framework for intrusion detection systems (IDS) to identify the attacks and their types. The first stage aims to identify suspicious internet protocol (IP) addresses based on the abrupt deviation from the normal activity pattern. The second screening stage aims to analyse the packets received from suspicious IP addresses by applying a recently developed single-phase statistical hierarchical clustering (SHiC) algorithm designed for clustering and outlier detection. The data packets are classified as outliers based on their higher statistic distance to the existing components or clusters identified. The complete IDS framework is developed and applied to two benchmark datasets and compared with the results produced by several outlier detection algorithms. The proposed framework is found to be consistently more accurate in detecting attacks.

Suggested Citation

  • P.V.N. Rajeswari & M. Shashi, 2024. "Intrusion detection system using statistical query tree with hierarchical clustering approach," International Journal of Data Mining, Modelling and Management, Inderscience Enterprises Ltd, vol. 16(2), pages 176-195.
  • Handle: RePEc:ids:ijdmmm:v:16:y:2024:i:2:p:176-195
    as

    Download full text from publisher

    File URL: http://www.inderscience.com/link.php?id=138822
    Download Restriction: Access to full text is restricted to subscribers.
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:ids:ijdmmm:v:16:y:2024:i:2:p:176-195. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sarah Parker (email available below). General contact details of provider: http://www.inderscience.com/browse/index.php?journalID=342 .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.