Incorporating soft computing techniques into a probabilistic intrusion detection system

IEEE Transactions on Systems, Man and Cybernetics Part C: Applications and Reviews

Volumn 32, Issue 2, 2002, Pages 154-160

  Cho, Sung Bae ^a,b  

^a Yonsei University ^*

^b Yonsei University   (South Korea)

Author keywords

Anomaly detection; Fuzzy logic; Hidden Markov model; Intrusion detection system; Self organizing map; Soft computing

Indexed keywords

COMPUTER SIMULATION; FUZZY SETS; LEARNING ALGORITHMS; LEARNING SYSTEMS; MARKOV PROCESSES; MATHEMATICAL MODELS; MAXIMUM LIKELIHOOD ESTIMATION; MEMBERSHIP FUNCTIONS; PARAMETER ESTIMATION; PROBABILITY DISTRIBUTIONS; SELF ORGANIZING MAPS; VECTOR QUANTIZATION;

ANOMALY DETECTION; HIDDEN MARKOV MODELS; INTRUSION DETECTION SYSTEM; SOFT COMPUTING;

SECURITY OF DATA;

EID: 0036588773     PISSN: 10946977     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSMCC.2002.801356     Document Type: Article

References (20)

1. K. Ilgun, R. A. Kemmerer, and P. A. Porras, "State transition analysis: A rule-based intrusion detection system," IEEE Trans. Softw. Eng., vol. 21, pp. 181-199, Mar. 1995.
2. W. Lee, S. Stolfo, and P. K. Chan, "Learning patterns from Unix process execution traces for intrusion detection," in Proc. AAAI97 Workshop on AI Methods in Fraud and Risk Management, 1997.
3. G. Vigna and R. A. Kemmerer, "Netstat: A network-based intrusion detection approach," in Proc. NISSC'98, Oct. 1998, pp. 338-347.
4. S. Forrest, S. A. Hofmeyr, and A. Somayaji, "Computer immunology," Commun. ACM, vol. 40, no. 10, pp. 88-96, Oct. 1997.
5. T. F. Lunt, "A survey of intrusion detection techniques," Comput. Security, vol. 12, no. 4, pp. 405-418, June 1993.
6. P. A. Porras and P. G. Neumann, "Emerald: Event monitoring enabling responses to anomalous live disturbances," in Proc. 20th NISSC, Oct. 1997, pp. 353-365.
7. L. A. Zadeh, "Fuzzy logic, neural networks, and soft computing," Commun. ACM, vol. 37, no. 3, pp. 77-84, Mar. 1994.
8. Sunsoft, "Solaris 2.5 Sunshield basic security module guide,", 1995.
9. H. Deba, M. Dacier, and A. Wespi, "Toward a taxonomy of intrusion-detection systems," Comput. Networks, vol. 31, pp. 805-822, 1999.
10. P. Helman and G. Liepins, "Statistical foundations of audit trail analysis for the detection of computer misuse," IEEE Trans. Softw. Eng., vol. 19, pp. 886-901, Sept. 1993.
11. P. Helman, G. Liepins, and W. Richards, "Foundations of intrusion detection," in Proc. 1993 IEEE Symp. Research in Security and Privacy, Oakland, CA, May 1993, pp. 16-28.
12. H. Javitz et al., "Next generation intrusion detection expert system (NIDES)-1. statistical algorithms rationale-2. rationale for proposed resolver," SRI International, March, Tech. Rep. A016-Rationales, 1993.
13. H. Vaccaro and G. Liepins, "Detection of anomalous computer session activity," in Proc. 1989 IEEE Symp. Research in Security and Privacy, 1989, pp. 280-289.
14. T. Lane and C. E. Brodley, "Temporal sequence learning and data reduction for anomaly detection," in Proc. ACCS'98, 1997, pp. 150-158.
15. A. K. Ghosh, A. Schwartzbard, and M. Schatz, "Learning program behavior profiles for intrusion detection," in Proc. Workshop on Intrusion Detection and Network Monitoring, Santa Clara, CA, April 1999, pp. 51-62.
16. C. Warrender, S. Forrest, and B. Pearlmutter, "Detecting intrusions using system calls: Alternative data models," in Proc. IEEE Symp. Security and Privacy, May 1999, pp. 133-145.
17. T. Spyrou and J. Darzentas, "Intention modeling: Approximating computer user intentions for detection and prediction of intrusions," in Information Systems Security. London, U.K.: Chapman & Hall, May 1996, pp. 39-335.
18. T. Kohonen, Self-Organizing Maps. Berlin, Germany: Springer, 1995.
19. L. R. Rabiner, "A tutorial on hidden Markov models and selected applications in speech recognition," Proc. IEEE, vol. 77, pp. 257-286, Feb. 1989.
20. J. S. R. Jang, "Fuzzy inference systems," in Neuro-Fuzzy and Soft Computing. Englewood Cliffs, NJ: Prentice-Hall, 1997.