12 May 2016 Comparison of artificial intelligence classifiers for SIP attack data
Author Affiliations +
Honeypot application is a source of valuable data about attacks on the network. We run several SIP honeypots in various computer networks, which are separated geographically and logically. Each honeypot runs on public IP address and uses standard SIP PBX ports. All information gathered via honeypot is periodically sent to the centralized server. This server classifies all attack data by neural network algorithm. The paper describes optimizations of a neural network classifier, which lower the classification error. The article contains the comparison of two neural network algorithm used for the classification of validation data. The first is the original implementation of the neural network described in recent work; the second neural network uses further optimizations like input normalization or cross-entropy cost function. We also use other implementations of neural networks and machine learning classification algorithms. The comparison test their capabilities on validation data to find the optimal classifier. The article result shows promise for further development of an accurate SIP attack classification engine.
© (2016) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Jakub Safarik, Jakub Safarik, Jiri Slachta, Jiri Slachta, } "Comparison of artificial intelligence classifiers for SIP attack data", Proc. SPIE 9850, Machine Intelligence and Bio-inspired Computation: Theory and Applications X, 985006 (12 May 2016); doi: 10.1117/12.2225292; https://doi.org/10.1117/12.2225292

Back to Top