Abstract
The paper considers the binary classification of time series based on their fractal properties by machine learning. This approach is applied to the realizations of normal and attacked network traffic, which allows to detect DDoS-attacks. A comparative analysis of the results of the classification by the random forest and neural network - fully connected multi-layer perceptron is carried out. The statistical, fractal and recurrence characteristics calculated from each time series were used as features for classification. The analysis showed that both methods provide highly accurate of classification and can be used to detect attacks in intrusion detection systems.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Shelukhin OI, Smolskiy SM, Osin AV (2007) Self-similar processes in telecommunications. Wiley, New York, pp 183–196. https://doi.org/10.1002/9780470062098
Radivilova T, Kirichenko L, Ageiev D, Bulakh V (2020) The methods to improve quality of service by accounting secure parameters. In: Hu Z, Petoukhov S, Dychka I, He M (eds) Advances in computer science for engineering and education II. ICCSEEA 2019. Advances in intelligent systems and computing, vol 938. Springer, Cham, pp 346–355. https://doi.org/10.1007/978-3-030-16621-2_32
Daradkeh YI, Kirichenko L, Radivilova T (2018) Development of QoS methods in the information networks with fractal traffic. Int J Electron Telecommun 64(1):27–32. https://doi.org/10.24425/118142
Gupta N, Srivastava K, Sharma A (2016) Reducing false positive in intrusion detection system: a survey. Int J Comput Sci Inf Technol 7(3):1600–1603
Popa SM, Manea GM (2015) Using traffic self-similarity for network anomalies detection. In: Proceedings of 20-th international conference on control systems and computer science, Bucharest, pp 639–644
Kaur G, Saxena V, Gupta J (2017) Detection of TCP targeted high bandwidth attacks using self-similarity. J King Saud Univ Comput Inf Sci. https://doi.org/10.1016/j.jksuci.2017.05.004
Deka R, Bhattacharyya D (2016) Self-similarity based DDoS attack detection using Hurst parameter. Secur Commun Netw 9(17):4468–4481. https://doi.org/10.1002/sec.1639
Brambila F (2017) Fractal analysis - applications in physics, engineering and technology. IntechOpen. https://doi.org/10.5772/65531
Rea W, Oxley L, Reale M, Brown J (2009) Estimators for long range dependence: an empirical study. Electron J Stat
Hippenstiel R, El-Kishky H, Radev P (2004) On time-series analysis and signal classification - part I: fractal dimensions. In: Proceedings of 38th asilomar conference on signals systems and computers, Pacific Grove, USA, vol 2, pp 2121–2125. https://doi.org/10.1109/ACSSC.2004.1399541
Ledesma-Orozco SE, Ruiz J, García G, Aviña G, Hernández D (2011) Analysis of self-similar data by artificial neural networks. In: Proceedings of the 2011 international conference on networking, sensing and control, Delft, pp 480–485. https://doi.org/10.1109/ICNSC.2011.5874873
Kirichenko L, Radivilova T, Bulakh V (2019) Machine learning in classification time series with fractal properties. Data 4(1):5. https://doi.org/10.3390/data4010005
Tyralis H, Dimitriadis P, Koutsoyiannis D, O’Connell PE, Tzouka K, Iliopoulou T (2018) On the long-range dependence properties of annual precipitation using a global network of instrumental measurements. Adv Water Resour 111:301–318. https://doi.org/10.1016/j.advwatres.2017.11.010
Arjunan SP, Kumar DK, Naik GR (2010) A machine learning based method for classification of fractal features of forearm sEMG using Twin Support vector machines. In: Proceedings of the 2010 annual international conference of the IEEE engineering in medicine and biology, Buenos Aires, pp 4821–4824. https://doi.org/10.1109/IEMBS.2010.5627902
Matuszewski J, Sikorska-Łukasiewicz K (2017) Neural network application for emitter identification. In: Proceedings of the 18th international radar symposium (IRS), Prague, Czech Republic, 15 Aug 2017, pp 1–8. https://doi.org/10.23919/IRS.2017.8008202
Korus L, Piórek M (2015) Compound method of time series classification. Nonlinear Anal Model Control 20(4):545–560. https://doi.org/10.15388/NA.2015.4.6
Eckmann JP, Kamphorst SO, Ruelle D (1987) Recurrence plots of dynamical systems. Europhys Lett 5:973–977
Kantelhardt JW (2012) Fractal and multifractal time series. In: Meyers R (ed) Mathematics of complexity and dynamical systems. Springer, New York. https://doi.org/10.1007/978-1-4614-1806-1_30
Taqqu M, Teverovsky V, Willinger W (1995) Estimators for long-range dependence: an empirical study. Fractals 3(4):785–798. https://doi.org/10.1142/S0218348X95000692
Kirichenko L, Radivilova T, Deineko Z (2011) Comparative analysis for estimating of the hurst exponent for stationary and nonstationary time series. Int J Inf Technol Knowl 5:371–388
Riedi RH: Multifractal Processes. https://www.researchgate.net/publication/2839202_Multifractal_Processes. Accessed 27 Mar 2019
Bulakh V, Kirichenko L, Radivilova T (2018) Classification of multifractal time series by decision tree methods. In: Proceedings of the 14th international conference on ICT in education, research and industrial applications. Integration, harmonization and knowledge transfer. Volume I: Main conference, vol 2105, Kyiv, Ukraine
Bulakh V, Kirichenko L, Radivilova T (2018) Time series classification based on fractal properties. In Proceedings of the 2018 IEEE second international conference on data stream mining and processing (DSMP), Lviv, Ukraine, pp 198–201. https://doi.org/10.1109/DSMP.2018.8478532
Marwan N, Wessel N, Meyerfeldt U, Schirdewan A, Kurths J (2002) Recurrence-plots-based measures of complexity and application to heart-rate-variability data. Phys Rev E Stat Nonlin Soft Matter Phys 66(2):026702. https://doi.org/10.1103/PhysRevE.66.026702
Marwan N, Romano M, Thiel M, Kurths J (2007) Recurrence plots for the analysis of complex system. Phys Rep 438(5–6):237–329. https://doi.org/10.1016/j.physrep.2006.11.001
Zbilut JP, Zaldivar-Comenges J-M, Stozzi F (2002) Recurrence quantification based Liapunov exponent for monitoring divergence in experimental data. Phys Lett A 297(3–4):173–181. https://doi.org/10.1016/S0375-9601(02)00436-X
Ngamga EJ, Nandi A, Ramaswamy R, Romano MC, Thiel M, Kurths J (2007) Recurrence analysis of strange nonchaotic dynamics. Phys Rev E 75(3):036222. https://doi.org/10.1103/PhysRevE.75.036222
Kirichenko L, Kobitskaya Yu, Habacheva A (2014) Comparative analysis of the complexity of chaotic and stochastic time series. Radio Electron Comput Sci Control 2(31):126–134
Kirichenko L, Baranovskyi O, Kobitskaya Y (2016) Recurrence analysis of self-similar and multifractal time series. Inf Content Process 3(1):16–37
Kirichenko L, Radivilova T, Bulakh V (2018) Classification of fractal time series using recurrence plots. In: Proceedings of the 2018 international scientific-practical conference problems of infocommunications. Science and Technology (PIC S&T), Kharkiv, Ukraine, pp 719–724. https://doi.org/10.1109/INFOCOMMST.2018.8632010
Kirichenko L, Radivilova T, Alghawli AS (2013) Mathematical simulation of self-similar network traffic with aimed parameters. Anale Seria Inform 11(1):17–22
Al-kasassbeh M, Al-Naymat G, Al-Hawari E (2016) Towards generating realistic SNMP-MIB dataset for network anomaly detection. Int J Comput Sci Inf Secur 14(9):1162–1185
Radivilova T, Kirichenko L, Bulakh V (2019) Detection of DDoS attacks by mashing learning based on fractal properties. In: Security in cervatury the social internet space in context values and hazards, Kharkiv, Ukraine, pp 299–315
Ivanisenko I, Kirichenko L, Radivilova T (2015) Investigation of self-similar properties of additive data traffic. In: Proceedings of the 2015 Xth international scientific and technical conference “Computer Sciences and Information Technologies” (CSIT), Lviv, Ukraine, pp 169–171. https://doi.org/10.1109/STC-CSIT.2015.7325459
Ivanisenko I, Kirichenko L, Radivilova T (2016) Investigation of multifractal properties of additive data stream. In: Proceedings of the 2016 IEEE first international conference on data stream mining and processing (DSMP), Lviv, Ukraine, pp 305–308. https://doi.org/10.1109/DSMP.2016.7583564
Cielen D, Meysman A, Ali M (2016) Introducing data science: big data, machine learning, and more, using python tools. Manning Publications, Shelter Island
Quinlan JR (1993) C4.5: Programs for machine learning. Morgan Kaufmann Publishers Inc, San Francisco
Breiman L (2001) Random forests. Mach Learn 45(1):5–32. https://doi.org/10.1023/A:1010933404324
Ioffe S, Szegedy C (2015) Batch normalization: accelerating deep network training by reducing internal covariate shift. In: Proceedings of the 32nd international conference on machine learning, PMLR, Lille, France, vol 37, pp 448–456. https://arxiv.org/abs/1502.03167
Kingma DP, Ba J (2015) Adam: a method for stochastic optimization. In: Proceedings of the 3rd international conference on learning representations (ICLR), San Diego, USA. https://arxiv.org/abs/1412.6980
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Kirichenko, L., Radivilova, T., Bulakh, V. (2020). Binary Classification of Fractal Time Series by Machine Learning Methods. In: Lytvynenko, V., Babichev, S., Wójcik, W., Vynokurova, O., Vyshemyrskaya, S., Radetskaya, S. (eds) Lecture Notes in Computational Intelligence and Decision Making. ISDMCI 2019. Advances in Intelligent Systems and Computing, vol 1020. Springer, Cham. https://doi.org/10.1007/978-3-030-26474-1_49
Download citation
DOI: https://doi.org/10.1007/978-3-030-26474-1_49
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-26473-4
Online ISBN: 978-3-030-26474-1
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)