EWMA techniques for computer intrusion detection through anomalous changes in event intensity

Quality and Reliability Engineering International

Volumn 18, Issue 6, 2002, Pages 443-451

  Ye, Nong ^a   Borror, Connie ^a   Zhang, Yebin ^a  

^a ARIZONA STATE UNIVERSITY   (United States)

Author keywords

Anomaly detection; Computer audit data; Exponentially weighted moving average (EWMA); Information assurance; Intrusion detection

Indexed keywords

COMPUTER NETWORKS; INFORMATION TECHNOLOGY; MONITORING; QUALITY OF SERVICE; SECURITY OF DATA;

INTRUSION DETECTION;

RELIABILITY THEORY;

EID: 0036864028     PISSN: 07488017     EISSN: None     Source Type: Journal    
DOI: 10.1002/qre.493     Document Type: Article

References (18)

1. Stallings W. Network and Inter-network Security Principles and Practice. Prentice-Hall: Englewood Cliffs, NJ, 1995.
2. Kaufman C., Perlman R., Speciner M. Network Security: Private Communication in a Public World. Prentice-Hall: Englewood Cliffs, NJ, 1995.
3. Ye N., Giordano J., Feldman J. Detecting information warfare attacks: Current state of the art from a process control viewpoint. Communications of the ACM 2001; 44.
4. Escamilla T. Intrusion Detection: Network Security Beyond the Firewall. Wiley: New York, 1998.
5. Debar H., Dacier M., Wespi A. Towards a taxonomy of intrusion-detection systems. Computer Networks 1999; 31:805-822.
6. Lippmann R., Fried D., Graf I., Haines J., Kendall K., McClung D., Weber D., Webster S., Wyschogrod D., Cunningham R., Zissman M. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. Proceedings DARPA Information Survivability Conference and Exposition, Los Alamitos, CA, January 2000. IEE Computer Society Press: New York, 2000; 12-26.
7. Denning D.E. An intrusion-detection model. IEEE transactions on Software Engineering 1987; 13(2):222-232.
8. Roberts S. Control chart tests based on geometric moving averages. Technometrics 1959; 1:239-250.
9. Crowder S. A simple method for studying run-length distribution of exponentially weighted moving average charts. Technometrics 1987; 29:401-407.
10. Crowder S. Design of exponentially weighted moving average schemes. Journal of Quality Technology 1989; 21:155-162.
11. Hunter J. The exponential weighted moving average. Journal of Quality Technology 1986; 18:203-209.
12. Lucas J., Saccucci M. Exponentially weighted moving average control schemes: Properties and enhancements. Technometrics 1990; 32:1-12.
13. MacGregor J., Harris T. The exponentially weighted moving variance. Journal of Quality Technology 1993; 25(1):106-118.
14. Borror C., Montgomery D., Runger G. Robustness of the EWMA control charts to non-normality. Journal of Quality Technology 1999; 31(3):309-316.
15. Borror C., Champ C., Rigdon S. EWMA control charts for Poisson data. Journal of Quality Technology 1998; 30:352-361.
16. Montgomery D. Introduction to Statistical Quality Control. Wiley: New York, 2001.
17. Montgomery D. Johnson D., Gardiner J. Forecasting and Time Series Analysis. McGraw-Hill: New York, 1990.
18. Montgomery D. Mastrangelo C. Some statistical process control methods for autocorrelated data. Journal of Quality Technology 1991; 23(3):179-193.