<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Binary Abstractions &#187; Research</title>
	<atom:link href="http://www.binaryabstractions.com/category/research/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.binaryabstractions.com</link>
	<description>Research and Other Diatribes</description>
	<lastBuildDate>Thu, 04 Nov 2010 22:25:28 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>sFlow Content Analysis</title>
		<link>http://www.binaryabstractions.com/2009/05/05/sflow-content-analysis/</link>
		<comments>http://www.binaryabstractions.com/2009/05/05/sflow-content-analysis/#comments</comments>
		<pubDate>Tue, 05 May 2009 19:26:35 +0000</pubDate>
		<dc:creator>Justin</dc:creator>
				<category><![CDATA[Research]]></category>

		<guid isPermaLink="false">http://www.binaryabstractions.org/?p=61</guid>
		<description><![CDATA[I recently began exploring a new research project to determine the effectiveness of various classification schemes on sFlow v5 data.  Previous efforts using a Naive Bayesian Classifier to identify unique patters within 802.11 wireless header information, which is similarly incomplete, has shown promise.  The objective here is to compare an NBC to other classification techniques [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.binaryabstractions.com/wp-content/uploads/2009/05/sflow.gif"><img class="alignleft size-full wp-image-195" title="sflow" src="http://www.binaryabstractions.com/wp-content/uploads/2009/05/sflow.gif" alt="" width="119" height="48" /></a>I recently began exploring a new research project to determine the effectiveness of various classification schemes on <a href="http://www.sflow.org/sflow_version_5.txt" target="_blank">sFlow</a> v5 data.  Previous efforts using a <a href="http://en.wikipedia.org/wiki/Naive_Bayes_classifier" target="_blank">Naive Bayesian Classifier</a> to identify unique patters within 802.11 wireless header information, which is similarly incomplete, has shown promise.  The objective here is to compare an NBC to other classification techniques such as an <a href="http://en.wikipedia.org/wiki/Artificial_neural_network" target="_blank">Artificial Neural Network</a>, specifically a Multi-Layer Perceptron.</p>
<p>The challenge is that both of these classification schemes require some degree of learning supervision to effectively classify this type of data.  The MLP NN uses the <a href="http://en.wikipedia.org/wiki/Backpropagation" target="_blank">backpropagation algorithm</a> for supervised training which generates a scaling factor to determine the error in each output node and influences nodes in previous or hidden layers accordingly.</p>
<p>In my supposed spare time, I plan on using the Matlab Neural Network Toolbox to implement both classifiers and compare their effective abilities to properly identify unique events of interest within a sample set of sFlow data.</p>
<p>Analysis of the Wireless Covert Channel Attack:<br />
Carrier Frequency Selection: <a title="http://www.iu.hio.no/nik07/bidrag/Dyrkolbotn.pdf" href="http://www.iu.hio.no/nik07/bidrag/Dyrkolbotn.pdf">http://www.iu.hio.no/nik07/bidrag/Dyrkolbotn.pdf</a></p>
<p>A Dynamic Trust Model Based on Naive Bayes<br />
Classifier for Ubiquitous Environments: <a title="http://uclab.khu.ac.kr/resources/publication/J_56.pdf" href="http://uclab.khu.ac.kr/resources/publication/J_56.pdf">http://uclab.khu.ac.kr/resources/publication/J_56.pdf</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.binaryabstractions.com/2009/05/05/sflow-content-analysis/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

