First-order versus high-order stochastic models for computer intrusion detection

Quality and Reliability Engineering International

Volumn 18, Issue 3, 2002, Pages 243-250

  Ye, Nong ^a,b   Ehiabor, Timothy ^a   Zhang, Yebin ^a  

^a ARIZONA STATE UNIVERSITY   (United States)

^b Arizona State University   (United States)

Author keywords

Anomaly detection; Computer security; Intrusion detection; Markov models

Indexed keywords

COMPUTER NETWORKS; COMPUTER SIMULATION; MARKOV PROCESSES; ROUTERS; SECURITY SYSTEMS;

COMPUTER INTRUSION DETECTION;

COMPUTER CRIME;

EID: 0036575252     PISSN: 07488017     EISSN: None     Source Type: Journal    
DOI: 10.1002/qre.478     Document Type: Article

References (22)

1. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation
2. Towards a taxonomy of intrusion-detection systems
3. A process control approach to cyber attack detection
4. Probabilistic techniques for intrusion detection based on computer audit data
5. An anomaly detection technique based on a chi-square statistic for detecting intrusions into information systems
6. A system architecture for computer intrusion detection
7. Detecting intrusions using system calls: Alternative data models
8. A neural network component for an intrusion detection system
9. Learning program behavior profiles for intrusion detection
10. Fixed-vs. variable-length patterns for detecting suspicious process behavior
11. Modeling system calls for intrusion detection with dynamic window sizes
12. The relative operating characteristic in psychology