A rough set theory based method for anomaly intrusion detection in computer network systems

Expert Systems

Volumn 20, Issue 5, 2003, Pages 251-259

  Cai, Zhongmin ^a   Guan, Xiaohong ^a,b   Shao, Ping ^a   Peng, Qingke ^a   Sun, Guoji ^a  

^a XI'AN JIAOTONG UNIVERSITY   (China)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

Anomaly detection; Computer network security; Intrusion detection; Knowledge base; Rough sets

Indexed keywords

KNOWLEDGE BASED SYSTEMS; REAL TIME SYSTEMS; ROUGH SET THEORY; SECURITY OF DATA;

INTRUSION DETECTION;

COMPUTER NETWORKS;

EID: 0242289557     PISSN: 02664720     EISSN: None     Source Type: Journal    
DOI: 10.1111/1468-0394.00249     Document Type: Article

References (15)

1. ASAKA, M., T. ONABUTA, T. INOUE, S. OKAZAWA and S. GOTO (2001) A new intrusion detection method based on discriminant analysis, IEICE Transactions on Information and Systems, E84D (5), 570-577.
2. BACE, R. (2000) Intrusion Detection, Basingstoke: Macmillan Technical.
3. BEYNON, M.J., B. CURRY and P.H. MORGAN (2000) Classification and rule induction using rough set theory, Expert Systems, 17 (3), 136-148.
4. COHEN, W.W. (1995) Fast effective rule induction, in Machine Learning: Proceedings of the Twelfth International Conference, Lake Taho, San Mateo, CA: Morgan Kaufman.
5. FORREST, S., S.A. HOFMEYR, A. SOMAYAJI and T.A. LONGSTAFF (1996) A sense of self for UNIX processes, in Proceedings of the 1996 IEEE Symposium on Computer Security and Privacy, New York: IEEE Computer Society, 120-128.
6. HOFMEYER, S., S. FORREST and A. SOMAYAJI (1998) Intrusion detection using sequences of system calls, Journal of Computer Security, 6 (3), 151-180.
7. KIM, K. and I. HAN (2001) The extraction of trading rules from stock market data using rough sets, Expert Systems, 18 (4), 194-202.
8. KOMOROWSKI, J., Z. PAWLAK, L. POLKOWSKI and A. SKOWRON (1999) Rough sets: a tutorial, in Rough Fuzzy Hybridization, S. Pal and A. Skowron (eds), Berlin: Springer, 3-98.
9. LEE, W., S. STOLFO and P. CHAN (1997) Learning patterns from UNIX process execution traces for intrusion detection, AAAI Workshop: AI Approaches to Fraud Detection and Risk Management, Providence, RI: AAAI.
10. ØHRN, A., J. KOMOROWSKI, A. SKOWRON and P. SYNAK (1998) The ROSETTA software system, in Rough Sets in Knowledge Discovery 2: Applications, Case Studies and Software Systems, L. Polkowski and A. Skowron (eds), Studies in Fuzziness and Soft Computing 19, Heidelberg: Physica, 572-576.
11. PAWLAK, Z. (1991) Rough Sets - Theoretical Aspects of Reasoning about Data, Dordrecht: Kluwer Academic.
12. VINTERBO, S. and A. ØHRN (2000) Minimal approximate hitting sets and rule templates, International Journal of Approximate Reasoning, 25 (2), 123-143.
13. WESPI, A., M. DACIER and H. DEBAR (2000) Intrusion detection using variable-length audit trail patterns, in Proceedings of the Third International Workshop on the Recent Advances in Intrusion Detection (RAID 2000), H. Debar, Me et al. (eds), No. 1907 in LNCS, Berlin: Springer.
14. ZHANG, W., W. WU, J. LIANG and D. LI (2001) The Theory of Rough Set and Its Method, Beijing: Chinese Science Publishing House.
15. ZHU, D., G. PREMKUMAR, X. ZHANG and C. CHU (2001) Data mining for network intrusion detection: a comparison of alternative methods, Decision Sciences, 32 (4), 635-660.