Naive Bayes vs decision trees in intrusion detection systems

Proceedings of the ACM Symposium on Applied Computing

Volumn 1, Issue , 2004, Pages 420-424

  Amor, Nahla Ben ^a   Benferhat, Salem ^b   Elouedi, Zied ^a  

^a UNIVERSITY OF TUNIS   (Tunisia)

^b UNIVERSITÉ D'ARTOIS   (France)

Author keywords

[No Author keywords available]

Indexed keywords

COMPETITION; DECISION MAKING; INFORMATION ANALYSIS; LEARNING SYSTEMS; MATRIX ALGEBRA; PATTERN RECOGNITION; TREES (MATHEMATICS);

BAYES NETWORKS; DECISION TREES; INTRUSION DETECTION SYSTEMS; NAIVE BAYES;

COMPUTER NETWORKS;

EID: 2442424268     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/967900.967989     Document Type: Conference Paper

References (16)

1. Axelsson, S.: Intrusion detection systems: a survey and taxonomy. Technical report 99-15, March 2000.
2. Breiman, L., Friedman, J. H., Olshen, R. A., Stone, C. J.: Classification and regression trees. Monterey, CA Wadsworth & Brooks, 1984.
3. Cooper, G. F.: Computational complexity of probabilistic inference using Bayes belief networks. Artificial Intelligence, Vol. 42, 393-405, 1990.
4. Hyafil, L., Rivest, R. L: Constructing optimal binary decision trees is NP-complete. Information Processing Letters, 5(1):15-17, 1976.
5. Jensen, F. V.: Introduction to Bayesien networks. UCL Press, 1996.
6. John, G.: Enhancements to the Data Mining Process. PhD thesis, Stanford University, 1997.
7. Kumar, S., Spafford., E. H.: A software architecture to support misuse intrusion detection. In proceedings of the 18th National Information Security Conference, 194-204, 1995.
8. Ilgun, K., Kemmerer., R. A., Porras, P. A.: State transition: A rule-based intrusion detection approach. IEEE Transactions on Software Engineering, 21(3), 181-199, 1995.
9. Lunt, T.: Detecting intruders in computer systems. In proceedings of the Sixth Annual Symposium and Technical Displays on Physical and Electronic Security, 1993.
10. Pearl J.: Probabilistic Reasoning in intelligent systems: networks of plausible inference. Morgan Kaufmman, Los Altos, CA, 1988.
11. Porras, P. A., Neumann., P. G., EMERALD: Event monitoring enabling responses to anomalous live disturbances. In proceedings of the 20th National Information Systems Security Conference, Baltimore, Maryland, USA, NIST, 353-365, 1997.
12. Quinlan, J. R.: C4.5, Programs for machine learning. Morgan Kaufmann San Mateo Ca, 1993.
13. Quinlan, J. R.: Bagging, boosting, and C4.5. Proceedings of the thirteenth national conference on AI, Vol. 1, 725-730, 1997.
14. Valdes, A., Skinner K.: Adaptive Model-based Monitoring for Cyber Attack Detection. In proceedings of Recent Advances in Intrusion Detection (RAID 2000), Toulouse, France, 80-92, 2000.
15. http://kdd.ccs.uci.edu/databases/kddcup99/task.html
16. R. Marty: Snort the open source network IDS, http://www.snort.org/, 2001.