Behavior of Packet Counts for Network Intrusion Detection

Behavior of Packet Counts for Network Intrusion Detection Statistical Behavior of Packet Counts for Network Intrusion Detection Abstract— Intrusions and attacks have become a very serious problem in network world. This paper presents a statistical characterization of packet counts that can be used for network intrusion detection. The main idea is based on detecting any suspicious behavior in computer networks depending on the comparison between the correlation results of control and data planes in the presence and absence of attacks using histogram analysis. Signal processing tools such as median filtering, moving average filtering, and local variance estimators are exploited to help in developing network anomaly detection approaches. Therefore, detecting dissimilarity can indicate an abnormal behavior. Keywords— Anomaly detection, statistics, Network Intrusion Detection Systems (NIDS). I. INTRODUCTION NOWADAYS, the use of the Internet has become important and it increased considerably. Internet use has spread to daily work, business, education, entertainment and etc. Computer networks bring us a lot of benefits, such as computing and better performance, but they also bring risks. So, security systems have to be built to face those risks. One of those systems is the network intrusion detection system (NIDS), which is designed to alert the network administrators to the presence of an attack. Recently, intrusions are classified as serious Internet security threats due to the mass service disruption they result in, the unsafe use of the Internet, and the difficulty to defend against them [1]. Some attacks aim to consume large amount of resources to prevent legitimate users from receiving satisfactory performance. Network Intrusion Detection System is a tool to detect the attacks that attempt to compromise the availability, integrity or confidentiality of the network. It has been started to be used frequently as one component of an effective layered security model for an organization. This system monitors network traffic continuously for malicious activity, and raise alerts when they detect attacks. Existing intrusion detection systems can be classified into signature detection systems/ misuse and anomaly detection systems [2-3]. Signature detection systems rely on a database of a predefined set of attack signatures. They detect attacks by comparing the observed patterns of the network traffic with the database. If the attack is listed in the database, then it can be successfully detected and identified [4]. On the other hand, anomaly detection systems are designed to compare the parameters of the normal network traffic to the observed unusual traffic [5]. In such cases, the detected deviation from the normal traffic is declared as an attack. Such methods can detect new kinds of network attacks. In this paper, we aim to studding the intrusion and attacks behavior by monitoring the changes in the traffic of the network. Detecting dissimilarity between the correlation results of control and data planes can indicate an abnormal behavior [6]. This paper is organized as follows. Section II includes the anomaly detection techniques. Section III, includes the suggested statistical analysis. Section IV, includes the simulation results. Section V includes the concluding remarks. II. Anomaly detection techniques A number of studies have focused on developing network anomaly detection methods. For example, Haystack [7] is one of the statistical anomaly-based intrusion detection systems. In this system, a range of values is set to indicate the normal status of each pre-defined feature. If the values measured during a session lie outside the normal range, then the score of a subject is raised. Haystack was designed to work offline and that was considered as one of its drawbacks [8]. Statistical Packet Anomaly Detection Engine (SPADE) [9] is also one of the statistical anomaly-based intrusion detection systems. It uses the concept of an anomaly score to detect sport scans. A simple frequency domain based approach is used to calculate the anomaly score of a packet. The fewer the packets, the higher the anomaly score. One drawback of the SPADE is its high false alarm rate. In this paper, we concentrate on the statistical analysis of the correlation sequence between packet and control counts in computer networks [10]. The suggested approach is based on distinguishing histograms of the correlation sequences of normal and abnormal traffics. The correlation sequences are processed either directly or after pre-processing with differentiator, median filtering, or local variance estimation. III. Statistics Histogram Analysis Histogram is defined as a graphical representation of the distribution of data, a histogram is a function that counts the number of observations that fall into each of the disjoint categories, Thus, if we let k be the total number of bins and n be the total number of observations, the histogram mi meets the following conditions [7]: (1) Median Filtering The median filtering is based on sorting the data and selecting is the middle number. It is used to exclude impulsive values in the correlation sequences. Mean The mean is the average of a set of numbers (2) Variance The variance is a measure of how items are dispersed about their mean. The variance of a whole population is given by the equation [11] (3) where M is the local mean. IV. Proposed Approach The proposed approach can be summarized in the following steps: Network traffic packet traces are typically provided in raw tcpdump format [12]. Therefore, it is necessary to preprocess packets to extract the features in the format needed to carry out further analysis [6]. Extracting a count features, from the packet header information . Computing the similarity between the two traffic groups; control and data by using cross-correlation function. Applying some sort of pre-processing on the correlation sequence with median filtering, moving average, differentiator, and local variance estimation. Histogram estimation of the original correlation sequences and the pre-processed sequences. Creating databases for the histograms with attacks and without attacks. Setting thresholds based on these histograms for discrimination. V. experimental results We have used the cross-correlation results between the control and data packets when there is no attacks and when there is an attack for one day of KSU traffic. Fig. 1 shows the correlation coefficients between the control and data packets when there is no an attack. Fig 2 shows the correlation coefficients when there is an attack applied. Fig. 3 shows the correlation coefficients histogram distribution for normal and abnormal traffic. Fig. 4 shows the histogram distribution of the correlation coefficient median for normal and abnormal traffic. Fig. 5 shows the histogram distribution of correlation coefficients mean for normal and abnormal traffic. Fig. 6 shows the histogram distribution of the correlation coefficients local variance for normal and abnormal traffic. The experimental results reveal that when there is an attack, a noticeable difference in histogram distribution is found. Fig. 1 : Correlation coefficients for normal traffic. Fig. 2 : Correlation coefficients for abnormal traffic. Fig. 3 : Correlation coefficients histogram distribution for normal and abnormal traffic. Fig. 4 : Histogram of the correlation coefficients median for normal and abnormal traffic. Fig. 5 : Histogram of the correlation coefficients local mean for normal and abnormal traffic. Fig. 6 : Histogram of the correlation coefficients local variance for normal and abnormal traffic. From these figures, we can set a probability threshold for each case, based on which, a decision of normal or abnormal traffic can be taken. VI. Conclusion The paper presented a statistical study for the correlation coefficients between packet and control planes of network traffic. Simulation experiments have shown that there is a difference in histogram distribution between normal and abnormal traffics. With the aid of signal processing tools like median filtering, local mean filtering and local variance filtering, we can set a group of thresholds to distinguish between normal and abnormal traffics.

The Love Of Hamlet For Ophelia in Shakespeares Hamlet Essay example --

The Love Of Hamlet For Ophelia in Shakespeare's Hamlet Hamlet is without any reservations, one of Shakespeare's most mystifying plays. Although the play has a concise story, it is filled with many uncertainties relating to different issues behind the plot. The reader is left with many uncertainties about the true feelings of prince Hamlet. One question in particular is, did Hamlet really love Ophelia? This dispute can be reinforced either way, however I believe Hamlet was truly in love with Ophelia. Support for my decision comes from Hamlet's treatment towards Ophelia as shown throughout the play, but especially in Act 3, Scene 2, and at Ophelia?s grave in Scene 1 of Act 5. This play is about the troubles encountered by young prince Hamlet as he tries to seek revenge for his father?s murder. Hamlet discovers the murder of his father, as well as the adultery and incest committed by his mother and uncle. This results with Hamlet retaining a very embittered and cynical outlook on life. "Or that the Everlasting had not fixed His cannon 'gainst self-slaughter -- how weary, stale, flat, and unprofitable seem to me all the uses of this world." (1.2.131-134). Throughout the play, Hamlet teaches the audience the depths of his depression through soliloquies. Hamlet not only regards the world with pessimism, but he also has suicidal feelings. Hamlet displays thoughts of self that questions the worth of living. The foremost cause for his exasperation and aggravation is the fact that his mother and his uncle, Claudius immediately got married right after his father?s death. His mother's actions seem to be what repulses Hamlet most as he yells, "frailty thy name is wo man!" (1.2.146). Hamlet has developed a burning hate towards his mother and women in general. It is this fuming mind-set that is responsible for his terrible treatment towards dear, innocent Ophelia in Act 3. Once Hamlet discovers the cause of his father?s death, he disguises himself by acting nutty to mask his true objectives of revenge. By doing so Hamlet is now able to do whatever he wants to, without being questioned of his behavior. He does this on one occasion during a visit with Ophelia. Ophelia later relays this meeting to her father, telling him that Hamlet was not properly dressed, "and with a look so piteous in purport as if he had been loosed out of hell to speak of horrors-he comes be... ...itter reaction to her denial prove his feelings of love. Although Shakespeare may not have made it excessively clear, the popular belief supports Hamlet's love for Ophelia. So indeed, Hamlet did love Ophelia, and evidence is also in the play that she did love the prince. When Laertes tells Ophelia to beware of Hamlet's love, she does not deny her love for Hamlet but responds that yes she will be careful. As for the song, no part of any of Shakespeare's plays is ever thrown in simply because it was popular at the time. When Ophelia sings that sing in her mentally disturbed state she is revealing the nature of her relationship to Hamlet and his promises of love. In the end, Ophelia had no plan, plot or motive that drove her crazy, the loss of her lover and her father was too much for her to bear. I think Shakespeare made it a point to be for inconsistent to add to the many mysteries of Hamlet's character as well as allow readers to relate to Hamlet?s complex mind. That is what makes a play so interesting to a reader?s mind?when one can place themselves in the shoes of the main character. Work Cited: Shakespeare. Hamlet. New York: First Signet Classic Printing, 1998.

Analysis of Troy: Film Essay

The story takes place in the fertile, eastern lands bordered by the Mediterranean Sea and kept by the gods. Within the cradle of ancient civilization empires are built, wars fought, alliances forged, and heroes born. Agamemnon, king of Mycenae, has united most of Greece’s kingdoms under his rule and now advances his army upon the nation of Thessaly, hoping to include it in his collection of ever-growing conquests. King Triopas bargains with Agamemnon to each let one of their best fighters decide who wins the battle rather than engaging in open war. Triopas calls upon the giant Boagrius while Agamemnon calls to Achilles, but the legendary warrior is nowhere to be found. A messenger boy is sent to fetch him and Agamemnon curses the stubborn nature of the fiercest warrior Greece has ever seen. A half-god and blessed with incomparable strength and skill, Achilles lives to fight but he refuses to associate with Agamemnon, preferring instead to seek his own destiny and be immortalized in history. Achilles easily defeats Boagrius, sealing Agamemnon’s control over the nation, and calls out if there is anyone else worthy enough to fight him. Meanwhile, Princes Hector and Paris of Troy feast in the banquet hall of King Menelaus of Sparta as honored guests and peace ambassadors to their home nation. However, young Paris sneaks away to be with Menelaus’ beautiful wife, Helen whom he loves dearly. He convinces her to come back with him to Troy, stowing her away on his brother’s ship. When Hector finds out he is clearly angry but it is too late to return to Sparta with Helen and seek pardon. Finding Helen gone, Menelaus vows revenge on Troy and seeks the approval of his brother, Agamemnon, who is only too happy to oblige, though Agamemnon’s decision comes mostly from his desire to sack Troy. Odysseus, king of Ithaca and under command of Agamemnon, goes to convince Achilles to accompany them in the conquest of Troy. He finds him sparring with his young cousin, Patroclus who is more than eager to join in the fighting. But Achilles refuses to go, despite Odysseus’ assurance that this war will go down into history. Achilles later seeks advice from his mother,  the sea nymph Thetis who is gathering shells to make a new necklace for him. She tells him that if he chooses to stay home he will find a wife, raise a family, and die old and loved. If he goes to Troy, he will find his eternal glory and history will remember his name for thousands of years. However, should he go to Troy, he is doomed to die and will never return. Meanwhile, Hector and Paris return to Troy with Helen, greeted warmly by their fellow Trojans. The city is guarded by a high, thick wall that has remained impenetrable since its founding. They meet their father, King Priam who welcomes Helen and praises her beauty. Hector is reunited with his wife, Andromache and his infant son. Achilles decides to join Agamemnon’s campaign against Troy but brings his own warriors, the Myrmidons, led by Eudorus. Patroclus accompanies them as well. The Myrmidons prove to be faster rowers than the Greeks and arrive on the shores of Troy before anyone else, though Achilles tells Patroclus to stay and watch the ship. They take the beach with ease and sack the Temple of Apollo where priestess and cousin of Hector and Paris, Briseis is taken captive. In a defiant move, Achilles decapitates the statue of Apollo. Prince Hector leads an offensive to keep the Greeks at bay and runs into the temple where Achilles confronts him but refuses to fight him. Achilles explains that their fight would be suited best in front of an audience and he allows Hector to leave. Briseis is brought to Achilles’ hut as his prize. She berates him for killing priests of Apollo before he is summoned to see Agamemnon who is preparing to celebrate the victory. There, tensions rise as Achilles and the king argue over claims to the victory. Agamemnon goes further by bringing in Briseis, claiming her as his own spoil of war, which drives Achilles into a rage. He threatens to fight for her but she angrily interjects, saying that no one else will die for her. Achilles stays his blade, to the surprise of Agamemnon. Achilles vows that Agamemnon will one day fall under his sword. That night, Priam seeks the advice of his advisors and elders with his sons in attendance, discussing how best to defend against the Greeks. Paris  offers an alternative to bloodshed; he will fight Menelaus for Helen’s hand. The winner will take her home and the loser will burn before nightfall. Later, Priam speaks with Paris in a courtyard and admits that, in all the wars hes fought for power or land, a war fought for love makes more sense. He gives Paris the Sword of Troy, forged at its founding and containing the history of their nation. He explains that as long as a Trojan wields it there is hope for their people. Hector goes to see his wife and son. She fears for his life and can’t imagine living on without him. He comforts her before getting up to see his brother. In the halls, he sees a cloaked figure and gives pursuit to find that it’s Helen trying to leave the city. She is remorseful for being the sole reason so many Trojan men died that day but Hector tells her that returning to Menelaus will not end the war and that she is a princess of Troy now. Helen returns to Paris. The next day, Agamemnon’s army marches for Troy while Achilles, still seething over his loss of Briseis, watches from a nearby hill with his men. Hector and Paris ride out to meet Agamemnon and Menelaus before battle. Agamemnon demands that the Trojans return Helen to his brother and submit to his rule. Hector bravely rebuffs but Paris offers to fight Menelaus one-on-one, hoping that will settle the dispute. While Agamemnon could care less about returning Helen to his brother, he allows Menelaus the opportunity to issue revenge. The two begin their fight and Menelaus is clearly stronger. Paris is wounded and disarmed but, before Menelaus can deliver a death blow, ducks away and crawls back to his brother. Stunned at his cowardice, Menelaus demands the fight to continue but Hector defends his brother and drives his sword through Menelaus, killing him. Enraged, Agamemnon charges forward with his army. Watching from his hilltop, Achilles can’t help but curse under his breath at Agamemnon’s inability to keep his ranks in formation. Hector proves to be the more able warrior and overpowers the Greeks with his tactics. One of the strongest Greek warriors, Ajax is felled by Hector. Odysseus advises Agamemnon to fall back before he loses his entire army and the Greeks  retreat to the beach where their archers provide defense. With Menelaus dead, the main reason for the assault on Troy is gone and Agamemnon struggles to think of a way to rally the troops to his cause. Odysseus suggests that Agamemnon put his reservations aside and enlist Achilles to fight again. Outside, Briseis is tossed around between Greek soldiers, having been given to them by Agamemnon. Before she can be cruelly branded, Achilles steps in and takes her back to his hut. He gives her a wet cloth to clean with and some food. When she questions why he fights and defies the gods, he shows her a more reflective side to his nature and explains that the gods are jealous of men for their short, mortal lives. As such, everything is more beautiful. Priam consults with his advisors again while Paris laments over his cowardice. Helen assures him that, though Menelaus was a strong warrior, she hated her life with him. She’d rather have someone to love and grow old with than to see him die on the battlefield. Hector advises his father that the Greeks underestimated Trojan strength and that they should not do the same. However, General Glaucus wants to strike preemptively and High Priest Archeptolemus claims Troy is favored by the gods, citing bird omens. Despite Hector’s warnings to keep behind their walls, Priam favors his advisors and issues an attack before daybreak. As Achilles sleeps that night, Briseis takes a dagger and holds it to his throat. Without opening his eyes, he encourages her to kill him but she hesitates. They realize their feelings for each other and make love. Achilles decides that he’s had enough of war and offers to take Briseis away from Troy. Afterwards, he speaks with Eudorus and tells him that they will go home. Hearing this, Patroclus is devastated, having hoped to take part in battle. Achilles returns to his hut. Just as dawn approaches, the Trojan army, led by Hector, set up on the dunes and sent hundreds of lit arrows into the sand. The Greeks awake in time to see large balls of hay being rolled down the hill towards camp, ignited in huge fireballs by the torched arrows. Banging their shields to intimidate, the Trojans advance towards the Greek camp. Suddenly, Achilles appears in his armor and rallies the troops to fight. Achilles fights his way towards Hector and the two engage in combat. Greeks and Trojans alike surround them, edging them on, until Hector slits Achilles’ throat with a swift thrust of the sword. Achilles falls, gasping for breath, while the Myrmidons look on in horror. But when Hector removes his helmet, he discovers that the man he wounded is not Achilles; its Patroclus. Hector, repentant but resolute, drives his sword into the boy’s chest to finish him. He addresses Odysseus and tells him they’ve fought enough that day. Before leaving, Odysseus tells Hector that Patroclus was Achilles’ cousin. The Myrmidons return to camp as Achilles emerges from his tent. Seeing them battle-worn, he asks why they disobeyed him. Eudorus laments that Patroclus disguised himself in Achilles’ armor, even moved like him, and fell under Hector. Achilles is outraged and attacks Eudorus. Briseis tries to stop him but he throws her to the ground. Hector returns to his wife. He admits that he killed a boy who was much too young and feels that his actions will have severe repercussions. He shows his wife a hidden passage under Troy that she can take civilians through to get to the mountains should he die and the walls be breached. Though she is upset to have to consider this, she heeds his advice. Achilles puts his cousin on a funeral pyre and sets it alight. Agamemnon watches and says, â€Å"That boy may have just saved the war for us,† knowing that the rage of Achilles will not wane until he’s had revenge. Meanwhile, Helen watches as Paris practices his archery in preparation for battle, hitting his target time and again. The following morning, Achilles sets off to enact vengeance upon Hector. Briseis begs him not to go, but he ignores her. He rides to the gates of Troy and calls for Hector who dresses in his armor and says goodbye to his wife. He meets Achilles outside alone. Achilles throws down his helmet so that Hector can see his face. Though Hector tries to reason, Achilles is bent on bloodlust. As they begin to fight, Priam and Paris watch while Helen  comforts Andromache who can’t bring herself to look. Achilles overpowers Hector by driving his spear into his chest before finishing him with his sword. He then ties Hector’s legs together behind his chariot and drags him away, back to the beach. When he returns to his hut, Briseis cries out and asks when the killing will stop before leaving. That night, Achilles is visited by a stranger in a cloak. The stranger kisses Achilles’ hand before revealing himself as none other than King Priam. Having stealthily entered the Greek camp unnoticed, Priam begs for his son’s body back to be given a proper burial. He tells Achilles that, while Hector killed his cousin, he did not know who it was and he asks Achilles how many cousins and brothers he’s killed in his time. Despite being enemies, he asks for respect. Achilles relents. He weeps over Hector’s body, promising to meet him in the next life, before giving him to Priam. When Briseis comes forward, Achilles allows her to go home and apologizes for hurting her. He gives Priam his word that the Greeks will not attack Troy for 12 days to allot for proper mourning. When Agamemnon hears of Achilles’ secret treaty with Priam, he becomes incensed. But Odysseus, who notices the sculpture of a horse a fellow soldier has made for his son, proposes a plan, putting the 12 days of mourning to their advantage. After 12 days, the Trojans discover that the beach has been abandoned and various bodies lie in the sand. They appear to have been taken by disease and, where the heart of the camp once was, a large wooden horse has been erected. Upon seeing this, Priam is advised that the horse was left as a gift to the god Poseidon and is encouraged to bring it back to Troy. Paris, who is suspicious, urges his father to burn the horse, but Priam brings the horse into the city where its revered as a sign of the end of the war. A Trojan scout, hiking through the cliffs outside the city, comes upon a cove apart from the main beach and discovers the Greek armada hiding there. However, he is killed by arrow before he can warn the rest of Troy. Meanwhile, the whole city celebrates into the night. Once everything has  quieted down, the horse opens and Achilles, Odysseus, and a mass of Greek soldiers emerge from inside and open Troy’s gates where the rest of the Greek army has gathered. They quickly infiltrate the city, pillaging and burning homes and killing any Trojan who stands in their way while a tearful Priam can only watch. Soldiers of Troy attempt to defend the royal palace, but fail. As Priam prays before the statue of Apollo and asks why he’s been forsaken, Agamemnon comes up behind him and stabs him in the back. Achilles, meanwhile, searches the city for Briseis. Paris and Andromache lead surviving civilians down to the secret passage where Paris gives a young boy, Aeneas (a progenitor of the Romans), the Sword of Troy, reciting what his father told him. He then returns with his bow and arrow to help fight. Briseis is praying before a statue of Apollo when she is grabbed from behind by Agamemnon. Achilles sees this and runs to her aid. Agamemnon tells Briseis his intent to take her back to Greece as his slave before she takes a concealed knife and fatally stabs him in the neck. His guards accost her but Achilles kills them. As he is helping her up, Paris arrives and shoots an arrow through Achilles’ heel. Standing up to face Paris, despite Briseis’ cries, Achilles is shot again through the chest. He removes the arrow only to be shot again and again, each time removing the arrow. He finally collapses and tells Briseis that she was his peace in a lifetime of war and urges her to escape. Briseis goes with Paris and they leave as the Greeks arrive at the palace to find Achilles dead, seemingly taken by a single shot to the heel (thus perpetuating the myth surrounding his death). Achilles’ body is burned honorably on a funeral pyre within the ruins of Troy the following day as Odysseus watches and exalts, â€Å"If they ever tell my story, let them say I walked with giants. Men rise and fall like the winter wheat, but these names will never die. Let them say I lived in the time of Hector, tamer of horses. Let them say I lived in the time of Achilles.† Conclusion: The movie Troy ended with Odysseus burning Achilles in a funeral pyre. Achilles died at the end of the Trojan War and is a hero after saving Briseis. Analysis: Based on what I’ve research, Troy is an adaptation of the poem written by Homer it is also known as The Iliad and The screenplay was written by David Benioff and stars who were Brad Pitt, Eric Bana, Orlando Bloom, Brian Cox, Diane Kruger and Rose Byrne. The Importance of this film is in regards to the City of Troy, the alliances of the Greeks, and the reason behind the war itself. It was made to capture the imagination of Homer and his poems. The actors were chosen and represented through his eyes, yet embellished a great deal for entertainment purposes. Which it was enjoyable to watch, I found it somewhat inaccurate with questions unanswered. While there may also be evidence to support much of what Homer wrote about, the movie in itself creates a different illusion. The time, places, and people were either out of date nor not even involved in some cases. However, the actors portrayed what Homer described perfectly. Achilles was very strong and considered immortal, Hector was the bravest and modest leader of Troy under the Rule of Priam. Helen was extremely magnificently beautiful while Paris was naà ¯ve and weak. All of the characters involved had important roles whose actions were caused of many important events. However, if you relate back to Homer and back of what historians have discovered, the movie wasn’t accurate representation.

Adelie Penguin Pictures