SSH Bruteforce Attack Classification using Machine Learning

Marco Ariano Kristyanto; Ice Krisnahati; Franky Rawung; Dzhillan Dzhalila; Bima Dinda Nurwibawa; Wisnu Murti; Baskoro Adi Pratomo; Ary Mazharuddin Shiddiqi

doi:10.1109/ICoICT55009.2022.9914864

SSH Bruteforce Attack Classification using Machine Learning

Marco Ariano Kristyanto, Ice Krisnahati, Franky Rawung, Dzhillan Dzhalila, Bima Dinda Nurwibawa, Wisnu Murti, Baskoro Adi Pratomo, Ary Mazharuddin Shiddiqi

Institut Teknologi Sepuluh Nopember

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Citation (Scopus)

Abstract

One of the problems in computer network security is Intrusion Detection. To detect it, we need a NIDS (Network Intrusion Detection). One example of NIDS is a honeypot. In this research, we use a kippo honeypot as a tool as an IDS. In this paper, honeypot logs are used for classifying SSH attacks using machine learning. The research used the original dataset from Kippo's log to classify the ssh attack as the primary source. We implement four algorithm classifications: Decision Tree, Naive Bayes, SVM, and Random Forest. Our research found that Decision Tree (DT) and random forest have the same score and better accuracy than naive Bayes and SVM. The accuracy and F1 score of RF and DT are 0.92 and 0.92, respectively.

Original language	English
Title of host publication	2022 10th International Conference on Information and Communication Technology, ICoICT 2022
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	116-119
Number of pages	4
ISBN (Electronic)	9781665481656
DOIs	https://doi.org/10.1109/ICoICT55009.2022.9914864
Publication status	Published - 2022
Event	10th International Conference on Information and Communication Technology, ICoICT 2022 - Virtual, Online, Indonesia Duration: 2 Aug 2022 → 3 Aug 2022

Publication series

Name	2022 10th International Conference on Information and Communication Technology, ICoICT 2022

Conference

Conference	10th International Conference on Information and Communication Technology, ICoICT 2022
Country/Territory	Indonesia
City	Virtual, Online
Period	2/08/22 → 3/08/22

Keywords

Classification
SSH
SSH attack
honeypot
kippo
machine learning

Access to Document

10.1109/ICoICT55009.2022.9914864

Cite this

Kristyanto, M. A., Krisnahati, I., Rawung, F., Dzhalila, D., Nurwibawa, B. D., Murti, W., Adi Pratomo, B., & Shiddiqi, A. M. (2022). SSH Bruteforce Attack Classification using Machine Learning. In 2022 10th International Conference on Information and Communication Technology, ICoICT 2022 (pp. 116-119). (2022 10th International Conference on Information and Communication Technology, ICoICT 2022). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICoICT55009.2022.9914864

Kristyanto, Marco Ariano ; Krisnahati, Ice ; Rawung, Franky et al. / SSH Bruteforce Attack Classification using Machine Learning. 2022 10th International Conference on Information and Communication Technology, ICoICT 2022. Institute of Electrical and Electronics Engineers Inc., 2022. pp. 116-119 (2022 10th International Conference on Information and Communication Technology, ICoICT 2022).

@inproceedings{0d394696ac854cc18ba11ad40aeb7837,

title = "SSH Bruteforce Attack Classification using Machine Learning",

abstract = "One of the problems in computer network security is Intrusion Detection. To detect it, we need a NIDS (Network Intrusion Detection). One example of NIDS is a honeypot. In this research, we use a kippo honeypot as a tool as an IDS. In this paper, honeypot logs are used for classifying SSH attacks using machine learning. The research used the original dataset from Kippo's log to classify the ssh attack as the primary source. We implement four algorithm classifications: Decision Tree, Naive Bayes, SVM, and Random Forest. Our research found that Decision Tree (DT) and random forest have the same score and better accuracy than naive Bayes and SVM. The accuracy and F1 score of RF and DT are 0.92 and 0.92, respectively.",

keywords = "Classification, SSH, SSH attack, honeypot, kippo, machine learning",

author = "Kristyanto, {Marco Ariano} and Ice Krisnahati and Franky Rawung and Dzhillan Dzhalila and Nurwibawa, {Bima Dinda} and Wisnu Murti and {Adi Pratomo}, Baskoro and Shiddiqi, {Ary Mazharuddin}",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; 10th International Conference on Information and Communication Technology, ICoICT 2022 ; Conference date: 02-08-2022 Through 03-08-2022",

year = "2022",

doi = "10.1109/ICoICT55009.2022.9914864",

language = "English",

series = "2022 10th International Conference on Information and Communication Technology, ICoICT 2022",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "116--119",

booktitle = "2022 10th International Conference on Information and Communication Technology, ICoICT 2022",

address = "United States",

}

Kristyanto, MA, Krisnahati, I, Rawung, F, Dzhalila, D, Nurwibawa, BD, Murti, W, Adi Pratomo, B & Shiddiqi, AM 2022, SSH Bruteforce Attack Classification using Machine Learning. in 2022 10th International Conference on Information and Communication Technology, ICoICT 2022. 2022 10th International Conference on Information and Communication Technology, ICoICT 2022, Institute of Electrical and Electronics Engineers Inc., pp. 116-119, 10th International Conference on Information and Communication Technology, ICoICT 2022, Virtual, Online, Indonesia, 2/08/22. https://doi.org/10.1109/ICoICT55009.2022.9914864

SSH Bruteforce Attack Classification using Machine Learning. / Kristyanto, Marco Ariano; Krisnahati, Ice; Rawung, Franky et al.
2022 10th International Conference on Information and Communication Technology, ICoICT 2022. Institute of Electrical and Electronics Engineers Inc., 2022. p. 116-119 (2022 10th International Conference on Information and Communication Technology, ICoICT 2022).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - SSH Bruteforce Attack Classification using Machine Learning

AU - Kristyanto, Marco Ariano

AU - Krisnahati, Ice

AU - Rawung, Franky

AU - Dzhalila, Dzhillan

AU - Nurwibawa, Bima Dinda

AU - Murti, Wisnu

AU - Adi Pratomo, Baskoro

AU - Shiddiqi, Ary Mazharuddin

PY - 2022

Y1 - 2022

N2 - One of the problems in computer network security is Intrusion Detection. To detect it, we need a NIDS (Network Intrusion Detection). One example of NIDS is a honeypot. In this research, we use a kippo honeypot as a tool as an IDS. In this paper, honeypot logs are used for classifying SSH attacks using machine learning. The research used the original dataset from Kippo's log to classify the ssh attack as the primary source. We implement four algorithm classifications: Decision Tree, Naive Bayes, SVM, and Random Forest. Our research found that Decision Tree (DT) and random forest have the same score and better accuracy than naive Bayes and SVM. The accuracy and F1 score of RF and DT are 0.92 and 0.92, respectively.

AB - One of the problems in computer network security is Intrusion Detection. To detect it, we need a NIDS (Network Intrusion Detection). One example of NIDS is a honeypot. In this research, we use a kippo honeypot as a tool as an IDS. In this paper, honeypot logs are used for classifying SSH attacks using machine learning. The research used the original dataset from Kippo's log to classify the ssh attack as the primary source. We implement four algorithm classifications: Decision Tree, Naive Bayes, SVM, and Random Forest. Our research found that Decision Tree (DT) and random forest have the same score and better accuracy than naive Bayes and SVM. The accuracy and F1 score of RF and DT are 0.92 and 0.92, respectively.

KW - Classification

KW - SSH

KW - SSH attack

KW - honeypot

KW - kippo

KW - machine learning

UR - http://www.scopus.com/inward/record.url?scp=85141637673&partnerID=8YFLogxK

U2 - 10.1109/ICoICT55009.2022.9914864

DO - 10.1109/ICoICT55009.2022.9914864

M3 - Conference contribution

AN - SCOPUS:85141637673

T3 - 2022 10th International Conference on Information and Communication Technology, ICoICT 2022

SP - 116

EP - 119

BT - 2022 10th International Conference on Information and Communication Technology, ICoICT 2022

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 10th International Conference on Information and Communication Technology, ICoICT 2022

Y2 - 2 August 2022 through 3 August 2022

ER -

Kristyanto MA, Krisnahati I, Rawung F, Dzhalila D, Nurwibawa BD, Murti W et al. SSH Bruteforce Attack Classification using Machine Learning. In 2022 10th International Conference on Information and Communication Technology, ICoICT 2022. Institute of Electrical and Electronics Engineers Inc. 2022. p. 116-119. (2022 10th International Conference on Information and Communication Technology, ICoICT 2022). doi: 10.1109/ICoICT55009.2022.9914864

SSH Bruteforce Attack Classification using Machine Learning

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this