Copyright © 2006 Elsevier B.V. All rights reserved.
A latent class modeling approach to detect network intrusion
Received 27 April 2006;
References and further reading may be available for this article. To view references and further reading you must purchase this article.
Abstract
This study presents a latent class modeling approach to examine network traffic data when labeled abnormal events are absent in training data, or such events are insufficient to fit a conventional regression model. Using six anomaly-associated risk factors identified from previous studies, the latent class model based on an unlabeled sample yielded acceptable classification results compared with a logistic regression model based on a labeled sample (correctly classified: 0.95 vs. 0.98, sensitivity: 0.99 vs. 0.99, and specificity: 0.77 vs. 0.97). The study demonstrates a great potency for using the latent class modeling technique to analyze network traffic data.
Keywords: Intrusion detection; Machine learning; Classification; Latent class model; Computer security
Article Outline
- 1. Introduction
- 2. Methods
- 2.1. Study design
- 2.2. Latent class model
- 2.3. Data source
- 2.4. Outcome and risk factors
- 2.5. Statistical analyses
- 3. Results
- 3.1. Data characteristics
- 3.2. Classification
- 3.3. Evaluations
- 4. Discussion
- Acknowledgements
- References
- Vitae






E-mail Article
Add to my Quick Links

Cited By in Scopus (0)






