Difference between revisions of "Private:progress-alkurbi"

From NMSL
Line 7: Line 7:
  
 
=== Feb 01 ===
 
=== Feb 01 ===
* Works (Large Scale Evaluation & Documentation):
+
* Evaluation according to the plan (Large Scale Evaluation & Documentation) is complete, as following:
** Exporting statistics into Matlab, and fixing figures' errors (Still in progress).
+
** Generated Traffics have been checked.
** Generated two new 24h traffic with: one with 50 bots, and the other with 100 bots.
+
** Alpha & Beta has been tuned.
** Calculating FP/FN for all combinations and generate 24 statistic reports. I'm waiting for Prof suggestion on this matter as calculating FP/FN while applying the same setting (at least 24 different settings) will require an intensive and very long time.
+
** Different traffic have been generated for different number of bots [10, 50, 100].
** Export the 24 statistic reports into Matlab, and generate 24 figures.
+
** FP/FN has been calculated for different Win [1h, 2h, 3h], and for different Sliding-Win [5m, 10m, 15m, 20m, 25m, 30m], with different number of bots.
** Finally and to prove the ineffectiveness of picking (Win=1h), I'll need to run some experiments to calculate FP/FN as well, plot a figure and include it in the report.
+
** Average running time has been computed for different Win [1h, 2h, 3h] and different number of bots [10, 50, 100].
** Update the report.
+
** A total of 34 figures have been plotted and included in the report.
 +
** The attached report has all the update.
  
  

Revision as of 17:38, 31 January 2011

Spring 2011

  • Courses: None
  • Research: Developing Online SIP-Botnet Detection System
  • Progress Report: Please read "Progress" section here


Feb 01

  • Evaluation according to the plan (Large Scale Evaluation & Documentation) is complete, as following:
    • Generated Traffics have been checked.
    • Alpha & Beta has been tuned.
    • Different traffic have been generated for different number of bots [10, 50, 100].
    • FP/FN has been calculated for different Win [1h, 2h, 3h], and for different Sliding-Win [5m, 10m, 15m, 20m, 25m, 30m], with different number of bots.
    • Average running time has been computed for different Win [1h, 2h, 3h] and different number of bots [10, 50, 100].
    • A total of 34 figures have been plotted and included in the report.
    • The attached report has all the update.


Jan 24

  • Works (Large Scale Evaluation & Documentation):
    • Generated 24h SIP traffic with "1000" users, "10" bots.
    • Tuned Alpha & Beta values.
    • Ran the proposed system against the generated traffic with different win sizes (3h, 2h), and different Sliding-Win sizes (5m, 10m, 15m, 20m, 25m, 30m), to calculate False Positives/Negatives, and generated 12 statistics reports.
    • Exporting statistics reports into Matlab and generating figures.