An anomaly detection technique based on a chi-square statistic for detecting intrusions into information systems

Quality and Reliability Engineering International

Volumn 17, Issue 2, 2001, Pages 105-112

  Ye, Nong ^a,b   Chen, Qiang ^a  

^a Arizona State University   (United States)

^b PURDUE UNIVERSITY   (United States)

Author keywords

Chi square statistic; Computer security; Intrusion detection; Multivariate analysis

Indexed keywords

COMPUTER CRIME; CRYPTOGRAPHY; SECURITY OF DATA; STATISTICAL METHODS;

ANOMALY DETECTION TECHNIQUE; CHI SQUARE STATISTIC; INTRUSION DETECTION; SIGNATURE RECOGNITION;

MANAGEMENT INFORMATION SYSTEMS;

EID: 0035271352     PISSN: 07488017     EISSN: None     Source Type: Journal    
DOI: 10.1002/qre.392     Document Type: Article

References (20)

1. Stallings M. Network and Inter-network Security Principles and Practice. Prentice Hall: Englewood Cliffs, NJ, 1995.
2. Kaufman C, Perlman R, Speciner M. Network Security: Private Communication in a Public World. Prentice Hall: Englewood Cliffs, NJ, 1995.
3. Ye N, Giordano J, Feldman J. Detecting information warfare attacks: Current state of the art from a process control viewpoint. Communications of the ACM, in press.
4. Escamilla T. Intrusion Detection: Network Security Beyond the Firewall. John Wiley & Sons: New York, 1998.
5. Lippmann R, Fried D, Graf I, Haines J, Kendall K, McClung D, Weber D, Webster S, Wyschogrod D, Cunningham R, Zissman M. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. Proceedings of the DARPA Information Survivability Conference and Exposition, January 2000. IEEE Computer Society: Los Alamitos, CA, 2000; 12-26.
6. Ghosh AK, Schwatzbard A, Shatz M. Learning program behavior profiles for intrusion detection. Proceedings of the 1st USENIX Workshop on Intrusion Detection and Network Monitoring, April 1999. Santa Clara, CA. http://www.rstcorp.com/̃anup/.
7. Forrest S, Hofmeyr SA, Somayaji A. Computer immunology. Communications of the ACM 1997; 40(10):88-96.
8. Ko C, Fink G, Levitt K. Execution monitoring of security-critical programs in distributed systems: A specification-based approach. Proceedings of the 1997 IEEE Symposium on Security and Privacy, 1997; 134-144.
9. Anderson D, Frivold T, Valdes A. Next-generation intrusion detection expert system (NIDES): A summary. Technical Report SRI-CSL-97-07, SRI International, Menlo Park, CA, May 1995.
10. Javitz HS, Valdes A. The SRI statistical anomaly detector. Proceedings of the 1991 IEEE Symposium on Research in Security and Privacy, May 1991.
11. Javitz HS, Valdes A. The NIDES statistical component description of justification. Technical Report A010, SRI International, Menlo Park, CA, March 1994.
12. Jou Y, Gong F, Sargor C, Wu X, Wu S, Chang H, Wang F. Design and implementation of a scalable intrusion detection system for the protection of network infrastructure. Proceedings of the DARPA Information Survivability Conference and Exposition. IEEE Computer Society: Los Alamitos, CA, 2000; 69-83.
13. Ryan TP. Statistical Methods for Quality Improvement. John Wiley & Sons: New York, 2000.
14. Hotelling H. Multivariate quality control. Techniques of Statistical Analysis. Eisenhart C, Hastay MW, Wallis WA (eds.). McGraw-Hill: New York, 1947.
15. Woodall WH, Ncube MM. Multivariate CUSUM quality-control procedures. Technometrics 1985; 27:185-192.
16. Lowry CA, Woodall WH, Champ CW, Rigdon SE. Multivariate exponentially weighted moving average control chart. Technometrics 1992; 34:46-53.
17. Daniel WW. Biostatistics: A Foundation for Analysis in the Health Sciences. John Wiley & Sons: New York, 1987.
18. Montgomery DC. Introduction to Statistical Quality Control. John Wiley & Sons: New York, 2000.
19. Banks J. Principles of Quality Control. John Wiley & Sons: New York, 1989.
20. Ye N, Chen Q, Emran SM, Vilbert SM. A multivariate quality control technique for cyber intrusion detection. IEEE Transactions on Computers 2001; in review.