Principle components and importance ranking of distributed anomalies

Machine Learning

Volumn 58, Issue 2-3, 2005, Pages 217-230

  Begnum, Kyrre ^a   Burgess, Mark ^a  

^a OSLO METROPOLITAN UNIVERSITY   (Norway)

Author keywords

Anomaly detection; Machine learning

Indexed keywords

COMPUTER SYSTEMS; DATA MINING; EIGENVALUES AND EIGENFUNCTIONS; LEARNING SYSTEMS; LOCAL AREA NETWORKS; SECURITY OF DATA; TIME SERIES ANALYSIS;

ANOMALY DETECTION; INTRUSION DETECTION; LOGICAL CONNECTIONS; NETWORK SERVICES;

PRINCIPAL COMPONENT ANALYSIS;

EID: 15544363043     PISSN: 08856125     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10994-005-5827-4     Document Type: Article

References (25)

1. Balakrishnan, V. (1997). Graph theory. New York: Schaum's Outline Series, McGraw-Hill.
2. Barbará, D., Li, Y., Couto, J., Lin, J.-L., & Jajodia, S. (2003). Bootstrapping a data mining intrusion detection system. In Proceedings of the 2003 ACM Symposium on Applied Computing. New York, NY: ACM Press.
3. Bonacich, P. (1987). Power and centrality: A family of measures. American Journal of Sociology, 92, 1170-1182.
4. Burgess, M. (1993). Cfengine WWW site. http://www.iu.hio.no/cfengine
5. Burgess, M. (1995). A site configuration engine. Cambridge MA: Computing Systems, MIT Press, Vol. 8, p. 309.
6. Burgess, M. (1998). Computer immunology. In Proceedings of the Twelth Systems Administration Conference (LISA XII). USENIX Association: Berkeley, CA, p. 283.
7. Burgess, M. (2002). Two dimensional time-series for anomaly detection and regulation in adaptive systems. IFIP/IEEE 13th International Workshop on Distributed Systems: Operations and Management (DSOM 2002) (p. 169).
8. Burgess, M. (2004). Analytical network and system administration-Managing human-computer systems. Chichester: J. Wiley & Sons.
9. Burgess, M. (resubmitted). Probabilistic anomaly detection in distributed computer networks. Science of Computer Programming.
10. Burgess, M. & Canright, G. (2003). Scalability of peer configuration management in partially reliable and ad hoc networks. In Proceedings of the VIII IFIP/IEEE IM Conference on Network Management (p. 293).
11. Burgess, M., Haugerud, H., Reitan, T., & Straumsnes, S. (2001). Measuring host normality. ACM Transactions on Computing Systems. 20, 125-160.
12. Canright, G., Engø-Monsen, K., & Weltzien, å. (2003). Multiplex structure of the communications network in a small working group.Social Networks-An International Journal of Structural Analysis (submitted for publication).
13. Duda, R., Hart, P., & Stork, D. (2001). Pattern Classification. New York: Wiley Interscience.
14. Grimmett, G. & Stirzaker, D. (2001). Probability and random processes, 3rd edition. Oxford: Oxford Scientific Publications.
15. Han, S.-H., Kim, M.-S., Ju, H.-T., & Hong, J.-K. (2002). The architecture of NG-MON: A Passive Network Monitoring System for High-Speed IP Networks. In IFIP/IEEE 13th International Workshop on Distributed Systems: Operations and Management (DSOM 2002) (p. 16).
16. Kleinberg, J. (1999). Authoritative sources in a hyperlinked environment. Journal of the ACM, 46, 604.
17. Page, L., Brin, S., Motwani, R., & Winograd, T. (1998). The PageRank citation Ranking: Bringing order to the Web. Technical report, Stanford Digital Library Technologies Project.
18. Ranum, M. J., Landfield, K., Stolarchuk, M., Sienkiewicz, M., Lambeth, A., & Wall, E. (1997). Implementing a generalized tool for network monitoring. In Proceedings of the Eleventh Systems Administration Conference (LISA XI) (p. 1). Berkeley, CA: USENIX Association.
19. Snort, Intrusion detection system. http://www.snort.org
20. Somayaji, A., & Forrest, S. (2000). Automated reponse using system-call delays. In Proceedings of the 9th USENIX Security Symposium (p. 185).
21. Somayaji, A., Hofmeyr, S., & Forrest, S. (1997). Principles of a computer immune system. New Security Paradigms Workshop, ACM (pp. 75-82).
22. Steinder, M. & Sethi, A. (2002). Distributed fault localization in hierarchically routed networks. In IFIP/IEEE 13th International Workshop on Distributed Systems: Operations and Management (DSOM 2002) (p. 195).
23. Steinder, M. & Sethi, A. (2003). A survey of fault localization techniques in computer networks. Science of Computer Programming (to appear).
24. Stolfo, S. J., Lee, W., Chan, P. K., Fan, W., & Eskin, E. (2001). Data mining-based intrusion detectors: An overview of the columbia IDS project. ACM SIGMOD, 30:4.
25. Zanero, S., & Savaresi, S. M. Unsupervised learning techniques for an intrusion detection system. In Proceedings of the 2004 ACM Symposium on Applied Computing.