当前位置: X-MOL 学术Int. J. Distrib. Sens. Netw. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Multivariate Statistical Network Monitoring–Sensor: An effective tool for real-time monitoring and anomaly detection in complex networks and systems
International Journal of Distributed Sensor Networks ( IF 1.9 ) Pub Date : 2020-05-01 , DOI: 10.1177/1550147720921309
Roberto Magán-Carrión 1, 2 , José Camacho 2 , Gabriel Maciá-Fernández 2 , Ángel Ruíz-Zafra 1
Affiliation  

Technology evolves quickly. Low-cost and ready-to-connect devices are designed to provide new services and applications. Smart grids or smart health care systems are some examples of these applications. In this totally connected scenario, some security issues arise due to the large number of devices and communications. In this way, new solutions for monitoring and detecting security events are needed to address new challenges brought about by this scenario, among others, the real-time requirement allowing quick security event detection and, consequently, quick response to attacks. In this sense, Intrusion Detection Systems are widely used though their evaluation often relies on the use of predefined network datasets that limit their application in real environments. In this work, a real-time and ready-to-use tool for monitoring and detecting security events is introduced. The Multivariate Statistical Network Monitoring–Sensor is based on the Multivariate Statistical Network Monitoring methodology and provides an alternative way for evaluating Multivariate Statistical Network Monitoring–based Intrusion Detection System solutions. Experimental results based on the detection of well-known attacks in hierarchical network systems prove the suitability of this tool for complex scenarios, such as those found in smart cities or Internet of Things ecosystems.

中文翻译:

Multivariate Statistical Network Monitoring–Sensor:复杂网络和系统中实时监控和异常检测的有效工具

技术发展迅速。低成本和随时可连接的设备旨在提供新的服务和应用程序。智能电网或智能医疗保健系统是这些应用的一些示例。在这种完全连接的场景中,由于大量的设备和通信会出现一些安全问题。通过这种方式,需要用于监控和检测安全事件的新解决方案来应对这种情况带来的新挑战,其中包括允许快速安全事件检测并因此对攻击做出快速响应的实时性要求。从这个意义上说,入侵检测系统被广泛使用,尽管它们的评估通常依赖于限制其在实际环境中应用的预定义网络数据集的使用。在这项工作中,介绍了一种用于监控和检测安全事件的实时和即用型工具。多元统计网络监控传感器基于多元统计网络监控方法,提供了一种评估基于多元统计网络监控的入侵检测系统解决方案的替代方法。基于分层网络系统中已知攻击检测的实验结果证明了该工具适用于复杂场景,例如智慧城市或物联网生态系统中的场景。多元统计网络监控传感器基于多元统计网络监控方法,提供了一种评估基于多元统计网络监控的入侵检测系统解决方案的替代方法。基于分层网络系统中已知攻击检测的实验结果证明了该工具适用于复杂场景,例如智慧城市或物联网生态系统中的场景。多元统计网络监控传感器基于多元统计网络监控方法,提供了一种评估基于多元统计网络监控的入侵检测系统解决方案的替代方法。基于分层网络系统中已知攻击检测的实验结果证明了该工具适用于复杂场景,例如智慧城市或物联网生态系统中的场景。
更新日期:2020-05-01
down
wechat
bug