Improving intrusion detection performance using keyword selection and neural networks

Computer Networks

Volumn 34, Issue 4, 2000, Pages 597-603

  Lippmann, Richard P ^a   Cunningham, Robert K ^a  

^a MIT LINCOLN LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL COMPLEXITY; CONGESTION CONTROL (COMMUNICATION); DATA PRIVACY; DATABASE SYSTEMS; ERROR CORRECTION; NEURAL NETWORKS; SECURITY OF DATA; SIGNAL DETECTION; TELECOMMUNICATION TRAFFIC;

INTRUSION DETECTION SYSTEMS;

INTERNET;

EID: 0034300835     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/S1389-1286(00)00140-7     Document Type: Article

References (14)

1. J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, E. Stoner, State of the practice of intrusion detection technologies, Carnegie Mellon University/Software Engineering Institute Technical Report CMU/SEI-99-TR-028, January 2000.
2. E.G. Amoroso, Intrusion Detection: An Introduction to Internet Surveillance, Correlation, Trace Back, Traps, and Response, Intrusion.Net Books, 1999.
3. Cisco Systems Inc., NetRanger Intrusion Detection System Technical Overview, 1998, http://www.cisco.com/warp/public/778/security/netranger/ntran_tc.htm.
4. T. Heberlein, Network security monitor (NSM) - Final Report, U.C. Davis, February 1995, http://seclab.cs.ucdavis.edu/papers/NSM-final.pdf.
5. Lawrence Livermore National Laboratory, Network Intrusion Detector (NID) Overview, Computer Security Technology Center, 1998, http://ciac.llnl.gov/cstc/nid/intro.html.
6. W. Lee, S.J. Stolfo, K. Mok, Mining in a data-flow environment: experience in network intrusion detection, in: Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery & Data Mining (KDD '99), San Diego, CA, 1999.
7. R. Lippmann, J.W. Haines, D.J. Fried, J. Korba, K. Das, The 1999 DARPA off-line intrusion detection evaluation, Computer Networks 34 (2000) 579-595, this issue.
8. R.P. Lippmann, D.J. Fried, I. Graf, J.W. Haines, K.R. Kendall, D. McClung, D. Weber, S.E. Webster, D. Wyschogrod, R.K. Cunningham, M.A. Zissman, Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation, in: Proceedings of the 2000 DARPA Information Survivability Conference and Exposition (DISCEX), vol. 2, IEEE Press, January 2000.
9. R.P. Lippmann, R.K. Cunningham, Guide to creating stealthy attacks for the 1999 DARPA off-line intrusion detection evaluation, MIT Lincoln Laboratory Project Report IDDE-1, June 1999.
10. Lippmann R.P., Kukolich L., Singer E. LNKnet: neural network, machine learning, and statistical software for pattern classification. Lincoln Laboratory Journal. 6(2):1993;249-268.
11. MIT Lincoln Laboratory, A public web site http://www.ll.mit.edu/IST/ideval/index.html, contains limited information on the 1998 evaluation. Follow instructions on this web site or send email to the author (rpl or@sst.ll.mit.edu) to obtain access to a password protected site with more complete information on the evaluation and results.
12. P. Neumann, P. Porras, Experience with EMERALD to DATE, in: Proceedings of the First USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, CA, 1999.
13. T.H. Ptacek, T.N. Newsham, Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection, Secure Networks Inc. Report, January 1998.
14. Northcutt S. Network Intrusion Detection: An Analysis Handbook. 1999;New Riders Publishing, Indianapolis.