Data stream mining architecture for network intrusion detection

Proceedings of the 2004 IEEE International Conference on Information Reuse and Integration, IRI-2004

Volumn , Issue , 2004, Pages 363-368

  Chu, Nelson C N ^a   Williams, Adepele ^a   Alhajj, Reda ^a   Barker, Ken ^a  

^a UNIVERSITY OF CALGARY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; COMPUTER NETWORKS; DATA PROCESSING; DECISION MAKING; ELECTRONIC CRIME COUNTERMEASURES; LAWS AND LEGISLATION; ONLINE SYSTEMS; PROBABILISTIC LOGICS; REAL TIME SYSTEMS; TELECOMMUNICATION TRAFFIC;

ACTIVE NETWORK INTRUSION SYSTEM; DATA STREAM MINING; INTRUSION DETECTION SYSTEM (IDS); REAL-TIME DECISION MAKING;

DATA MINING;

EID: 16244390893     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. M. Garofalakis, J. Gehrke, and R. Rastogi, "Querying and Mining Data Streams: You Only Get One Look", Proc. of ACM SIGMOD Tutorial, Wisconsin, pp.635, June 2002.
2. L. Golab, and M.T. Ozsu, "Issues in Data Stream Management," SIGMOD Record, Vol.32, No.2, pp.5-14, June 2003.
3. P. Dokas, L. Ertoz, V. Kumar, A. Lazarevic, J. Srivastava, and P. Tan, "Data Mining for Network Intrusion Detection", Proc. of the National Science Foundation Workshop on Data Mining, pp.21-30, 2002.
4. C. Giannella, J.Han, J. Pei, X. Yan, and P. Yu, "Mining Frequent Patterns in Data Streams at Multiple Time Granularities", H. Kargupta, A. Joshi, K. Sivakumar, and Y. Yesha (eds.), Data Mining: Next Generation Challenges and Future Directions, AAAI/MIT Press, 2003.
5. L. Wenke, J. Salvatore, and Mok, K., "Mining in a Data-flow Environment: Experience in Network Intrusion Detection", Proc. of ACM-KDD, pp. 114-124, Aug.1999.
6. J. Han, J. Pei, and Y. Yin. "Mining Frequent Patterns without Candidate Generation", Proc. ACM SIGMOD, pp.1-12, 2000.
7. T. H. Ptacek and T. N. Newsham, "Secure Networks, Inc. Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection", Available online at: http://www.insecure.org/stf/secnet_ids/secnet_ids.html
8. K. Kent Frederick, "Network Intrusion Detection Signatures", Security in Focus, September 2001, Available online at: http://www. securityfocus.com/infocus/1623
9. RFC 791, Internet Protocol, Information Sciences Institute, September 1981, Available online at: http://www.rfc-editor.org/
10. RFC 793, Transmission Control Protocol, Information Sciences Institute, September 1981, Available online at: http://www.rfc-editor.org/
11. Massachusetts Institute of Technology (MIT) Lincoln Laboratory Intrusion Detection Attacks Database. Available online at: http://www.ll.mit.edu/IST/ ideval/data/data_index.html
12. W. Lee, S. J. Stolfo, and K. W. Mok, "A Data Mining Framework for Building Intrusion Detection Models", In Proceedings of the IEEE Symposium on Security and Privacy, 1999, Pg. 120-132.
13. H. Mannila, and H. Toivonen, "Discovering Generalized Episodes using Minimal Occurrences", Proc. ACM-KDD, pp.146-151, Aug. 1996.
14. Symantec Corporation, "Security Response: Attack Signatures", Available Online at: http://securityresponse.symantec.com/avcenter/nis_ids/
15. P. Domingos, and G. Hulten, "A General Framework for Mining Massive Data Streams", Journal of Computational and Graphical Statistics Vol. 12, 2003.
16. R. Agrawal, T. Imilienski, and A. Swami, "Mining Association Rules Between Sets of Items in Large Datasets", Proc. of ACM SIGMOD, pp.207-216, 1993.
17. A. Valdes and K. Skinner, "Adaptive, Model-Based Monitoring for Cyber Attack Detection", Proc. of RAID, H.Debar, L.Me and F. Wu (Eds.), LNCS 1907, Springer-Verlag, pp. 80-92, 2000.
18. R. Jin and G. Agrawal, "An Algorithm for In-Core Frequent Itemset Mining on Streaming Data", Department of Computer and Information Sciences, Ohio State University, Columbus, 2003
19. R. M. Karp, C. H.Papadimitriou, and S. Shenker, "A Simple Algorithm for finding Frequent elements in Streams and Bags", ACM TODS, 2003
20. W. Lee, S. Stolfo, and K.W. Mok, "A Data Mining Framewrk for Adaptive Intrusion Detection", Computer Science Department, Columbia University, New York, June 1998
21. Sudipto Guha, et al, "Clustering Data Streams: Theory and Practice", IEEE TKDE, Vol.15, No. 3, pp. 515-528, 2003.
22. J. Han, "Mining Dynamics of Data Streams in Multidimensional Space", Proc. of IEEE ICDM Keynote Speech, Japan, Dec. 2002.
23. G. Dong, J. Han, L. Lakshmanan, J. Pei, H. Wang and Philip Yu, "Online Mining of changes from Data Streams: Research Problems and Preliminary Results", Proc. of ACM SIGMOD MPDS, San Diego, CA, 2003.
24. Keita Fujii, "Java package for packet capture", http://netresearch.ics.uci.edu/kfujii/jpcap/doc/index.html
25. DoShelp.com, "Trojan and Remote Access Service Ports", http://www.doshelp.com/trojanports.htm