Two sophisticated techniques to improve HMM-based intrusion detection systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2820, Issue , 2003, Pages 207-219

  Cho, Sung Bae ^a   Han, Sang Jun ^a  

^a Yonsei University   (South Korea)

Author keywords

Anomaly detection; Combining multiple models; Hidden Markov model; Privilege flow

Indexed keywords

COMPUTER CRIME; ERROR DETECTION; ERRORS; HIDDEN MARKOV MODELS; MARKOV PROCESSES; MERCURY (METAL); REAL TIME SYSTEMS;

ANOMALY DETECTION; AUDIT DATA; DETECTION RATES; FALSE POSITIVE; INTRUSION DETECTION SYSTEMS; LARGE AMOUNTS; NORMAL BEHAVIOR; PRIVILEGE FLOW;

INTRUSION DETECTION;

EID: 21144432658     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-45248-5_12     Document Type: Article

References (14)

1. H. S. Vaccaro and G.E. Liepins, "Detection of anomalous computer session activity," In Proceedings of IEEE Symposium on Research in Security and Privacy, pp. 280-289, 1989.
2. K. E. Price, "Host-based misuse detection and conventional operating system's audit data collection," M.S. Dissertaion, Purdue University, Purdue, IN, December 1997.
3. T. Lane and C. E. Brodley, "An application of machine learning to anomaly detection," In Proceedings of the National Information Systems Security Conference, pp. 366-380, Washington, DC, October 1997.
4. T. Lane and C. E. Brodley, "Temporal sequence learning and data reduction for anomaly detection," In Proceedings of the Fifth ACM Conference on Computer and Communications Security, pp. 150-158, 1997.
5. A. K. Ghosh, A. Schwartzbard and M. Schatz, "Learning program behavior profiles for intrusion detection," In Proceedings of Workshop on Intrusion Detection and Network Monitoring, pp. 51-62, Santa Clara, USA, April 1999.
6. C. Warrender, S. Forrest and B. Pearlmutter, "Detecting intrusion using calls: Alternative data models," In Proceedings of IEEE Symposium on Security and Privacy, pp. 133-145, May 1999.
7. D. Y. Yeung and Y. Ding. "Host-based intrusion detection using dynamic and static behavioral models," The Journal of the Pattern Recognition society, December 2001.
8. L. R. Rabiner, "A tutorial on hidden Markov models and selected applications in speech recognition," Proceedings of the IEEE, vol. 77, no. 2, pp. 257-286, 1989.
9. L. R. Rabiner and B.H. Juang, "An introduction to hidden Markov models," IEEE ASSP Magazine, pp. 4-16, January 1986.
10. B. A. Kuperman and Eugene H. Spafford. "Generation of application level audit data via library interposition", CERIAS TR 99-11, COAST Laboratory, Purdue University, West Lafaytte, IN, October 1998.
11. Kohonen, T., Self-Organizing Maps, Springer press, 1995.
12. S. Mukkamala, A. H. Sung and A. Abraham, "Intrusion Detection Using Ensemble of Soft Computing Paradigms," Third International Conference on Intelligent Systems Design and Applications, Intelligent Systems Design and Applications, Advances in Soft Computing, Springer Verlag, Germany, pp. 239-248, 2003.
13. L. Didaci, G. Giacinto and F. Roli, "Ensemble Learning for Intrusion Detection in Computer Networks," In Proceedings of the Workshop on Machine Learning, Methods and Applications, held in the context of the 8th Meeting of the Italian Association of Artificial Intelligence (AI*IA), pp. 10-13, September, 2002.
14. J. H. Choy and S. B. Cho, "Anomaly detection of computer usage using artificial intelligence techniques, " Lecture Notes in Computer Scinece 2112 , pp. 31-43, Springer 2001.