Multivariate T2 Control Chart Based on James-Stein and Successive Difference Covariance Matrix Estimators for Intrusion Detection

Authors

DOI:

https://doi.org/10.22452/mjs.sp2019no2.3

Keywords:

T2 control chart; James-Stein estimator; successive difference covariance matrix; kernel density estimation; intrusion detection

Abstract

The intrusion detection is a process to monitor the events taking place in a computer system or network and analyse the monitoring results to find signs of intrusion. The multivariate control chart, which is often used in the intrusion detection system, is Hotelling's T2. In this study, the Hotelling's T2 chart performance for intrusion detection is improved using the successive difference covariance matrix to estimate the covariance matrix and James-Stein estimator to estimate the mean vector. The control limits of the proposed chart are calculated using kernel density estimation. The performance of the proposed method, using T2 based on kernel density estimation control limit, outperforms the other control chart approaches in both training and testing dataset.

Author Biographies

  • Muhammad Ahsan, Sepuluh Nopember Institute of Technology

    Department of Statistics, Institut Teknologi Sepuluh Nopember, Surabaya, Indonesia

  • Heri Kuswanto, Sepuluh Nopember Institute of Technology

    Department of Statistics, Institut Teknologi Sepuluh Nopember, Surabaya, Indonesia

  • Dedy Dwi Prastyo, Sepuluh Nopember Institute of Technology

    Department of Statistics, Institut Teknologi Sepuluh Nopember, Surabaya, Indonesia

  • Hidayatul Khusna, Sepuluh Nopember Institute of Technology

    Department of Statistics, Institut Teknologi Sepuluh Nopember, Surabaya, Indonesia

Downloads

Published

30-09-2019

How to Cite

Multivariate T2 Control Chart Based on James-Stein and Successive Difference Covariance Matrix Estimators for Intrusion Detection. (2019). Malaysian Journal of Science (MJS), 38(Sp2), 23-35. https://doi.org/10.22452/mjs.sp2019no2.3

Similar Articles

1-10 of 237

You may also start an advanced similarity search for this article.

Most read articles by the same author(s)