MDL criterion for NMF with application to botnet detection

Shoma Tanaka, Yuki Kawamura, Masanori Kawakita, Noboru Murata, Jun’Ichi Takeuchi

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    1 Citation (Scopus)

    Abstract

    A method for botnet detection from traffic data of the Internet by the Non-negative Matrix Factorization (NMF) was proposed by (Yamauchi et al. 2012). This method assumes that traffic data is composed by several types of communications, and estimates the number of types in the data by the minimum description length (MDL) criterion. However, consideration on the MDL criterion was not sufficient and validity has not been guaranteed. In this paper, we refine the MDL criterion for NMF and report results of experiments for the new MDL criterion on synthetic and real data.

    Original languageEnglish
    Title of host publicationNeural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings
    PublisherSpringer Verlag
    Pages570-578
    Number of pages9
    Volume9947 LNCS
    ISBN (Print)9783319466866
    DOIs
    Publication statusPublished - 2016
    Event23rd International Conference on Neural Information Processing, ICONIP 2016 - Kyoto, Japan
    Duration: 2016 Oct 162016 Oct 21

    Publication series

    NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
    Volume9947 LNCS
    ISSN (Print)03029743
    ISSN (Electronic)16113349

    Other

    Other23rd International Conference on Neural Information Processing, ICONIP 2016
    CountryJapan
    CityKyoto
    Period16/10/1616/10/21

    Fingerprint

    Matrix Factorization
    Factorization
    Traffic
    Internet
    Non-negative Matrix Factorization
    Communication
    Experiments
    Sufficient
    Botnet
    Estimate
    Experiment

    Keywords

    • Botnet
    • MDL principle
    • NMF

    ASJC Scopus subject areas

    • Theoretical Computer Science
    • Computer Science(all)

    Cite this

    Tanaka, S., Kawamura, Y., Kawakita, M., Murata, N., & Takeuchi, JI. (2016). MDL criterion for NMF with application to botnet detection. In Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings (Vol. 9947 LNCS, pp. 570-578). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9947 LNCS). Springer Verlag. https://doi.org/10.1007/978-3-319-46687-3_63

    MDL criterion for NMF with application to botnet detection. / Tanaka, Shoma; Kawamura, Yuki; Kawakita, Masanori; Murata, Noboru; Takeuchi, Jun’Ichi.

    Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings. Vol. 9947 LNCS Springer Verlag, 2016. p. 570-578 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 9947 LNCS).

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    Tanaka, S, Kawamura, Y, Kawakita, M, Murata, N & Takeuchi, JI 2016, MDL criterion for NMF with application to botnet detection. in Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings. vol. 9947 LNCS, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 9947 LNCS, Springer Verlag, pp. 570-578, 23rd International Conference on Neural Information Processing, ICONIP 2016, Kyoto, Japan, 16/10/16. https://doi.org/10.1007/978-3-319-46687-3_63
    Tanaka S, Kawamura Y, Kawakita M, Murata N, Takeuchi JI. MDL criterion for NMF with application to botnet detection. In Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings. Vol. 9947 LNCS. Springer Verlag. 2016. p. 570-578. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). https://doi.org/10.1007/978-3-319-46687-3_63
    Tanaka, Shoma ; Kawamura, Yuki ; Kawakita, Masanori ; Murata, Noboru ; Takeuchi, Jun’Ichi. / MDL criterion for NMF with application to botnet detection. Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings. Vol. 9947 LNCS Springer Verlag, 2016. pp. 570-578 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).
    @inproceedings{3ef0475f9deb416aa101a350ad6abb8f,
    title = "MDL criterion for NMF with application to botnet detection",
    abstract = "A method for botnet detection from traffic data of the Internet by the Non-negative Matrix Factorization (NMF) was proposed by (Yamauchi et al. 2012). This method assumes that traffic data is composed by several types of communications, and estimates the number of types in the data by the minimum description length (MDL) criterion. However, consideration on the MDL criterion was not sufficient and validity has not been guaranteed. In this paper, we refine the MDL criterion for NMF and report results of experiments for the new MDL criterion on synthetic and real data.",
    keywords = "Botnet, MDL principle, NMF",
    author = "Shoma Tanaka and Yuki Kawamura and Masanori Kawakita and Noboru Murata and Jun’Ichi Takeuchi",
    year = "2016",
    doi = "10.1007/978-3-319-46687-3_63",
    language = "English",
    isbn = "9783319466866",
    volume = "9947 LNCS",
    series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
    publisher = "Springer Verlag",
    pages = "570--578",
    booktitle = "Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings",
    address = "Germany",

    }

    TY - GEN

    T1 - MDL criterion for NMF with application to botnet detection

    AU - Tanaka, Shoma

    AU - Kawamura, Yuki

    AU - Kawakita, Masanori

    AU - Murata, Noboru

    AU - Takeuchi, Jun’Ichi

    PY - 2016

    Y1 - 2016

    N2 - A method for botnet detection from traffic data of the Internet by the Non-negative Matrix Factorization (NMF) was proposed by (Yamauchi et al. 2012). This method assumes that traffic data is composed by several types of communications, and estimates the number of types in the data by the minimum description length (MDL) criterion. However, consideration on the MDL criterion was not sufficient and validity has not been guaranteed. In this paper, we refine the MDL criterion for NMF and report results of experiments for the new MDL criterion on synthetic and real data.

    AB - A method for botnet detection from traffic data of the Internet by the Non-negative Matrix Factorization (NMF) was proposed by (Yamauchi et al. 2012). This method assumes that traffic data is composed by several types of communications, and estimates the number of types in the data by the minimum description length (MDL) criterion. However, consideration on the MDL criterion was not sufficient and validity has not been guaranteed. In this paper, we refine the MDL criterion for NMF and report results of experiments for the new MDL criterion on synthetic and real data.

    KW - Botnet

    KW - MDL principle

    KW - NMF

    UR - http://www.scopus.com/inward/record.url?scp=84992623189&partnerID=8YFLogxK

    UR - http://www.scopus.com/inward/citedby.url?scp=84992623189&partnerID=8YFLogxK

    U2 - 10.1007/978-3-319-46687-3_63

    DO - 10.1007/978-3-319-46687-3_63

    M3 - Conference contribution

    SN - 9783319466866

    VL - 9947 LNCS

    T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

    SP - 570

    EP - 578

    BT - Neural Information Processing - 23rd International Conference, ICONIP 2016, Proceedings

    PB - Springer Verlag

    ER -