Detecting and Classifying NMAP Scans with ML techniques

In this project, we implement an NMAP-attack live detection system, powered by a FCNN detector and a Random Forest classifier. This project is part of the EECE655 course offered at American University of Beirut.

Install guide

First, you will need to install the kdd99_feature_extractor tool by following the instructions here
Next, clone the project into a directory of your choice <path-to-project> and navigate to it
Execute bash install.sh

Running the tool

Navigate to the directory containing the tool (default is ~/kdd99_feature_extraction).
Execute bash run-detect.sh

Training the models

Refer to classifier/README.md

Authors

Fouad Trad
Saiid El Hajj Chehade
Adam Hazimeh
Abdel Rahman