False alarm classification model for network-based intrusion detection system

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3177, Issue , 2004, Pages 259-265

  Shin, Moon Sun ^a   Kim, Eun Hee ^a   Ryu, Keun Ho ^a  

^a Chungbuk National University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 26444529309     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-28651-6_38     Document Type: Article

References (10)

1. D. Schnackenberg, K. Djahandari, and D. Sterne, Infrastructure for Intrusion Detection and Response, Proceedings of the DARPA ISCE, Hilton Head, SC, Jan. 2000.
2. M.J. Lee, M.S. Shin, H. S. Moon, K. H. Ryu Design and Implementation of Alert Analyzer with Data Mining Engine, in Proc. IDEAL'03, HongKong, March. 2003.
3. W. Lee, S. J. Stolfo, K. W. Mok A Data Mining Framework for Building Intrusion Detection Models in Proc. The 2nd International Symposium on Recent Advances in Intrusion Detection, RAID, 1999.
4. J. Ross Quinlan, C4.5: Programs for and Neural Networks, Machine Learning, Morgan Kaufman publishers, 1993.
5. Snort. Open-source Network Intrusion Detection System. http://www.snort.org.
6. E.H. Spafford and D. Zamboni, Intrusion detection using autonomous agents, Computer Networks, 34, 547-570, 2000.
7. H. Debar and A.Wespi, Aggregation and correlation of intrusion-detection alerts, In Recent Advances in Intrusion Detection, in Lecture Notes in Computer Science, 85 - 103, 2001.
8. A.Valdes and K. Skinner, Probabilistic alert correlation, in Proc. The 4th International Symposium on Recent Advances in Intrusion Detection, RAID, 54-68, 2001.
9. Tcpdump/Libpcap, Network Packet Capture Program, http://www.tcpdump.org, 2003.
10. P. Ning and Y. Cui, An intrusion alert correlator based on prerequisites of intrusions, Technical Report TR-2002-01, Department of Computer Science, North Carolina State University, 2002.