METHOD FOR INTRUSION DETECTION OF UBIQUITOUS HOME NETWORKS ENVIRONMENT, RECORDING MEDIUM THEREOF AND APPARATUS FOR INTRUSION DETECTION OF UBIQUITOUS HOME NETWORKS ENVIRONMENT

摘要

An intrusion detection method of a ubiquitous home network environment, a recording medium thereof, and an intrusion detection device in the ubiquitous home network environment are provided to offer detailed information on an attacking type by using clustering, to ensure expansibility and escalation of a system, and to ensure fast and efficient study and updating by targeting a class only of an attacking type while another class is not influenced when the new attacking type is detected. Classification for normal data and attacking data is performed by using a single class support vector machine from network traffic data(510). The classified attacking data is classified into passive attacks and active attacks to determine a risk level of the attacking data(520). Attacking types of the classified attacking data are classified by using multiple class support vector machines(530). Clustering using a kernel ART is performed according to each attacking type, and detailed information on the attacking types is generated(540). A coping method of a system is determined by using the risk level, the attacking types, and the detailed information(550).