BGP Anomaly Detection Using Association Rule Mining Algorithm

Authors : Mubarak ALTAMİMİ, Zafer ALBAYRAK, Muhammet ÇAKMAK, Ahmet Nusret ÖZALP

Pages : 134-139

Doi:10.31590/ejosat.1186700

View : 21 | Download : 16

Publication Date : 2022-10-31

Article Type : Research Paper

Abstract :An anomaly is the occurrence of an exception that affects network security. The requirement for abnormality detection in a network is Anomaly detection, which detects and removes anomalous flow from the network. The Border Gateway Protocol insert ignore into journalissuearticles values(BGP); is the most common external Gateway Protocol used to communicate with autonomous systems to share routing and reachability information. This protocol\`s abnormal behavior may be caused by a variety of factors, including inadequate provisioning, malicious attacks, traffic or equipment issues, and network operator mistakes. BGP was built on the assumption of trust, and as a result, it has been hacked numerous times over the years. Code Red I is one well-known assault that targets BGP networking and produce abnormalities in its operation. These attacks were utilized as the dataset for training the model using network traffic data. The goal of this study is to detect the events that triggered an anomaly in the BGP during a time, as well as to detect an anomaly from the BGP throughout that time interval using the training dataset model. We present real association rule mining for BGP anomaly detection in the Intrusion Detection System insert ignore into journalissuearticles values(IDS);.
Keywords : BGP Anormali Tespiti, Veri madenciliği, Birliktelik Kuralları, Veri kümesi, Code Red I, Apriori Algoritması