Intelligent Classification and Visualization of Network Scans.

Chen, L. ; Muelder, C. ; Ma, K. ; Bartoletti, A.

Technical Information Center Oak Ridge Tennessee

关键词: Network scans;    Classifications;    Visualization;    Integrated systems;    Comparisons;   

RP-ID  :  DE2007914602

学科分类：工程和技术（综合）

美国|英语

来源: National Technical Reports Library

【 摘 要 】

Network scans are a common first step in a network intrusion attempt. In order to gain information about a potential network intrusion, it is beneficial to analyze these network scans. Statistical methods such as wavelet scalogram analysis have been used along with visualization techniques in previous methods. However, applying these statistical methods to reduce the data causes a substantial amount of data loss. This paper presents a study of using associative memory learning techniques to directly compare network scans in order to create a classification which can be used by itself or in conjunction with existing visualization techniques to better characterize the sources of these scans. This produces an integrated system of visual and intelligent analysis which is applicable to real world data.