Initial Progress (End of Jan to Mid Feb):
-
We studied some literature review
e.g: https://pdfs.semanticscholar.org/a9a8/bc2aeb82a0b93646108e236dd585b531a4fb.pdf
http://ieeexplore.ieee.org.ezproxy.library.uvic.ca/stamp/stamp.jsp?tp=&arnumber=6925822
-
We studied about Anomaly Detection systems such as NETAD, MAXENT etc and selected NETAD as an appropriate ADS for our project.
-
Studied about Attack types such as TCP SYN SCAN, TCP FLOOD, UDP FLOOD and analyze their behavior.
-
Analyze on collected material that how we perform data set operation for performance evolution.
-
How we merge them when we will gather data sets.
Progress (Mid FEB to Mid March):
-
We acquired data sets of traffics
-
Data set of P2P traffic.
-
Data set of general/benign traffic to make comparative analysis.
-
-
We are analyzing collected data sets, which application/ protocols are hosting on both traffic data sets.
-
We make sure that Traffic data sets collected must not include any of the application/protocol which is used in other network traffic, as this will affect our results.
-
We acquired data set of attack such as “TCP port scan” and currently working on gathering datasets of one or more to analyze and will choose appropriate according to our project need.
-
We are currently working on ADS NETAD which we will use for evaluation.
Progress (March second last week):
-
In previous updates, we gathered the data sets of only one attack.
-
In previous week, we have acquired data sets of two more attacks, these are TCP flood and UDP Flood.
-
We mentioned that we choose NETAD ADS but we are also evaluating MaxEnt performance to choose appropriate ADS among them.
-
Previously we decided only one attacks, but we expand our project to make better evaluation.
-
Lastly, within the upcoming week, we will complete our data sets and source coding operation to get results finally.
Progress (March last week):
-
We got our results, currently analyzing the results (i.e the accuracy of each value in result by calculating based on the formula of NETAD ADS).
-
We then plot our results on matlab to get in graphs.
-
After completing this (it will take one day with full dedication or two days with less) we will start working on our presentation.
Progress (Final Update - April 1 - 12):
-
We get our results in the form of ROC curve.
-
We formulated our generated results in spreadsheets to find out ideal values/threshold.
-
Final presentation has been done.
-
Currently working on final project report which will complete on April 12.
-
The spreadsheets of results and other materials including presentation can be found in the "Project files".
-
Results in ROC curve can be found in "Results".
-
Demo "how to run our project"can be found in "Demo".