Detecting intrusion with rule-based integration of multiple models

Computers and Security

Volumn 22, Issue 7, 2003, Pages 613-623

  Han, Sang Jun ^a   Cho, Sung Bae ^a  

^a Yonsei University   (South Korea)

Author keywords

Anomaly detection; Intrusion detection systems; Multi measure modeling

Indexed keywords

COMPUTER CRIME; DATA MINING; ERROR ANALYSIS; INFORMATION TECHNOLOGY; MATHEMATICAL MODELS; STATISTICAL METHODS;

INTRUSION DETECTION SYSTEMS (IDS);

SECURITY OF DATA;

EID: 0242637092     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/S0167-4048(03)00711-9     Document Type: Note

References (22)

1. CERTCC-KR, Security Incident Statistic in Korea, http://www.certcc.or.kr/english, 2002.
2. H.S. Vaccaro and G.E. Liepins, "Detection of anomalous computer session activity," In Proceedings of IEEE Symposium on Research in Security and Privacy, pp. 280-289, 1989.
3. S. Axelsson, "Intrusion detection systems: A survey and taxonomy," Technical Report 99-15, Department of Computer Engineering, Chalmers University, March 2000.
4. E. Biermann, E. Cloete and L. M. Venter, "A comparison of intrusion detection systems," Computers & Security, vol 20, no. 8, pp. 676-683, December 2001.
5. T. Heberlein, G. Dias, K. Levitt, B. Mukherjee, J. Wood and D. Wolber, "A network security monitor," In Proceedings of the 1990 IEEE Symposium on Research in Security and Privacy, pp. 296-304, Los Alamitos, CA, USA, 1990.
6. T.F. Lunt, A. Tamaru, F. Gilham, R. Jagannathan, C. Jalali, and P.G. Neuman, "A real-time intrusion-detection expert system (IDES)," Technical Report Project 6784, CSL, SRI International, Computer Science Laboratory, SRI International, February 1992.
7. D. Anderson, T.F. Lunt, H. Javits, A. Tamaru and A. Valdes, "Detecting unusual program behavior using the statistical components of NIDES," NIDES Technical Report, SRI International, May 1995.
8. P.A. Porras and P.G. Neumann, "EMERALD: Event monitoring enabling responses to anomalous live disturbances," In Proceedings of the 20th National Information Systems Security Conference, pp. 353-365, Baltimore, Maryland, USA, October 1997.
9. H. Debar, M. Becker and D. Siboni, "A neural network component for an intrusion detection system," In Proceedings of 1992 IEEE Computer Society Symposium on Research in Security and Privacy, pp. 240-250, Oakland, CA, May 1992.
10. C. Warrender, S. Forrest and B. Pearlmutter, "Detecting intrusion using calls: Alternative data models," In Proceedings of IEEE Symposium on Security and Privacy, pp. 133-145, May 1999.
11. S.-B. Cho and H.-J. Park, "Efficient anomaly detection by modeling privilege flows with hidden Markov model," Computers & Security, vol. 22, no. 1, pp. 45-55, 2003.
12. R. Lippmann and S. Cunningham, "improving intrusion detection performance using keyword selection and neural networks," Computer Networks, vol. 34, no. 4, pp. 594-603, 2000.
13. W. Lee, S.J. Stolfo and K.W. Mok, "A data mining framework for building intrusion detection models," In Proceedings of IEEE Symposium on Security and Privacy, pp. 120-132, 1999.
14. A. Lazarevic, L. Ertoz, V. Kumar, A. Ozgur and J. Srivastava, "A comparative study of anomaly detection schemes in network intrusion detection," In Proceedings of Third SIAM Conference on Data Mining, May 2003.
15. W.W. Cohen, "Fast effective rule induction," In Proceedings of the 12th International Conference on Machine Learning, pp. 115-123, July 1995.
16. S.-B. Cho, "Incorporating soft computing techniques into a probabilistic intrusion detection system," IEEE Trans. on Systems, Man and Cybernetics-Part C:Applications and Reviews, vol. 32, no. 2, pp. 154-160, May 2002.
17. L.R. Rabiner, "A tutorial on hidden Markov models and selected applications in speech recognition," Proceedings of the IEEE, vol. 77, no. 2, pp. 257-286, 1989.
18. L.R. Rabiner and B.H. Juang, "An introduction to hidden Markov models," IEEE ASSP Magazine, pp. 4-16, January 1986.
19. H.S. Javitz and A. Valdes, "The SRI IDES statistical anomaly detector," NIDES Technical Report, SRI International, 1991.
20. D.E. Bell and L.J. LaPadula, "Secure computer systems: Unified exposition and multics interpretation," Mitre Technical Report ESD-TR-75-306, Mitre Corporation, March 1976.
21. A.G. Amoroso, Fundamentals of Computer Security Technology, PTR Prentice Hall, New Jersy, 1994.
22. N.A. Macmillan and C.D. Creelman, Detection Theory: A User's Guide, Cambridge University Press, Cambridge, 1991.