Intrusion Detection System Using Discrete Fourier Transform with Window Function

摘要

An Intrusion Detection System (IDS) is countermeasureagainst network attack. There are mainly twotypesof detections; signature-based and anomaly-based. And thereare two kinds of error; false negativeand false positive. Indevelopment of IDS, establishment of a method to reduce suchfalse is a major issue.In this paper, we propose a new anomaly-baseddetection method using Discrete Fourier Transform(DFT)with window function. In our method, we assume fluctuation ofpayload in ordinary sessions asrandom. On the other hand, we cansee fluctuation in attack sessions have bias. From the viewpointofspectrum analysis based on such assumption, we can find outdifferent characteristic in spectrum of attacksessions. Using thecharacteristic, we can detect attack sessions. Example detectionagainst Kyoto2006+dataset shows 12.0% of false positive at most,and 0.0% of false negative.