Abstract
Abstract
This article presents the development of an SNMP v3 agent for user modelling in LAN environments. This agent establishes SNMP communications both with the network managers in charge of configuring the modelling process and with the users from whom it collects information contained in the MIBs (Management Information Base) to find a pattern that characterizes their behaviour. This information will be processed and analyzed by a neural network type SOM (Self Organizing Map), which will allow, after the learning process, the detection of anomalies concerning the normal behaviour of the user. Both the parameters to be configured to define the modelling of each user and the results of the agent's supervision are collected in the modelling MIB contained in the proposed agent. In this way, the developed agent provides a unique tool to model all the users of the same LAN network and constitutes a fully integrated system in the SNMP architecture. Finally, a test scenario is presented for the application of the intrusion detection of the proposed agent.
Publisher
Research Square Platform LLC
Reference14 articles.
1. Nyamen Tato A Adrienne, Nkambou R (2023) Towards a multi-modal Deep Learning Architecture for User Modeling. The International FLAIRS Conference Proceedings. 36. 10.32473/flairs.36.133328
2. Meena M, Neha, Singh R (2016) Implementation of SNMP (Simple Network Management Protocol) on Sensor Network: A Review. International Journal of Advanced Research in Computer Engineering & Technology (IJARCET). 5. 1351–1354
3. Al-Naymat G, Alkasassbeh M, Hawari E (2018) Exploiting SNMP-MIB Data to Detect Network Anomalies using Machine Learning Techniques. Intelligent Systems Conference 20186-7 September 2018, |London, UK
4. Network intrusion detection system: A systematic study of machine learning and deep learning approaches;Ahmad Z;Trans Emerg Telecommunications Technol,2021
5. On Scalable Attack Detection in the Network. Networking, IEEE/ACM Transactions on;Kompella R,2007