Journal
NEUROCOMPUTING
Volume 72, Issue 13-15, Pages 2754-2762Publisher
ELSEVIER
DOI: 10.1016/j.neucom.2008.09.021
Keywords
Unsupervised learning clustering; Explanations; Self-organizing maps; Network security; Artificial intelligence applications
Categories
Ask authors/readers for more resources
Network security tests should be periodically conducted to detect vulnerabilities before they are exploited. However, analysis of testing results is resource intensive with many data and requires expertise because it is an unsupervised domain. This paper presents how to automate and improve this analysis through the identification and explanation of device groups with similar vulnerabilities. Clustering is used for discovering hidden patterns and abnormal behaviors. Self-organizing maps are preferred due to their soft computing capabilities. Explanations based on anti-unification give comprehensive descriptions of clustering results to analysts. This approach is integrated in Consensus, a computer-aided system to detect network vulnerabilities. (C) 2009 Elsevier B.V. All rights reserved.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available