PAID: A probabilistic agent-based intrusion detection system

Computers and Security

Volumn 24, Issue 7, 2005, Pages 529-545

  Gowadia, Vaibhav ^a,b,c   Farkas, Csilla ^a,b,c   Valtorta, Marco ^a,c  

^a University of South Carolina   (United States)

^b Department of Computer Science and Engineering ^*  (United States)

^c UNIVERSITY OF SOUTH CAROLINA   (United States)

Author keywords

Agents; Bayesian networks; Computer attack; Computer security; Intrusion detection; Network security

Indexed keywords

BAYESIAN NETWORKS; COMPUTER ATTACK; INTRUSION DETECTION; NETWORK SECURITY;

COMPUTER ARCHITECTURE; COMPUTER SCIENCE; INTELLIGENT AGENTS; MATHEMATICAL MODELS; PROBABILISTIC LOGICS; SECURITY OF DATA; SPAMMING;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 26844488270     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2005.06.008     Document Type: Article

References (40)

1. M. Asaka, A. Taguchi, and S. Goto The implementation of IDA: an intrusion detection agent system Proceedings of 11th annual FIRST conference on computer security incident handling and response 1999 Brisbane, Australia
2. S. Axelsson Intrusion detection systems: a taxonomy and survey Tech. Rep. 99-15 2000 Department of Computer Engineering, Chalmers University of Technology Göteborg, Sweden
3. J. Balasubramaniyan, J.O. Garcia-Fernandez, D. Isacoff, E.H. Spafford, and D.M. Zamboni An architecture for intrusion detection using autonomous agents Coast 98-05 1998 Department of Computer Science, Purdue University West Lafayette, IN
4. D. Barbara, N. Wu, and S. Jajodia Detecting novel network intrusions using bayes estimator Proceedings of first SIAM conference on data mining 2001
5. F. Bellifemine, A. Poggi, and G. Rimassa JADE - a FIPA compliant agent framework Proceedings of the fourth international conference and exhibition on the practical application of intelligent agents and multi-agents 1999 London
6. M. Bloemeke, and M. Valtorta The rumor problem in multiagent systems Tech. Rep. 2002-006 2002 Department of Computer Science and Engineering, University of South Carolina Columbia, SC
7. T. Bray, J. Paoli, C.M. Sperberg-McQueen, and E. Maler Extensible Markup Language (XML) 1.0 specification W3C Recommendation, Retrieved October 16, 2002 from http://www.w3.org/TR/2000/REC-xml-20001006 2001
8. C.A. Carver, J.M. Hill, J.R. Surdu, and U.W. Pooch A methodology for using intelligent agents to provide automated intrusion response Proceedings of the IEEE systems, man, and cybernetics information assurance and security workshop 2000 WestPoint, NY
9. Cho S, Cha S. SAD: web session anomaly detection based on parameter estimation. Computers and Security 2004;23(4):312-19.
10. G.F. Cooper The computational complexity of probabilistic inference using Bayesian networks Artificial Intelligence 42 2-3 1990 393 405
11. G.F. Cooper, and E. Herskovits A Bayesian method for the induction of probabilistic networks from data Machine Learning 9 4 1992 309 347
12. R.G. Cowell, S.L. Lauritzen, A.P. David, D.J. Spiegelhalter, V. Nair, and J. Lawless Probabilistic networks and expert systems 1999 New York, Inc.: Springer-Verlag
13. M. Dacier Design of an intrusion-tolerant intrusion detection system Tech. Rep. D10 2002 IBM Zurich Research Laboratory
14. W. DuMouchel Computer intrusion detection based on Bayes factors for comparing command transition probabilities Tech. Rep. 91 1999 National Institute of Statistical Sciences
15. FIPA FIPA ACL Message structure specifications Retrieved October 16, 2002 from http://www.fipa.org/specs/fipa00061 2002
16. FIPA FIPA-OS Developers guide Retrieved October 16, 2002 from http://fipa-os.sourceforge.net/docs/Developers/_Guide.pdf 2002
17. N. Friedman, and Y. Singer Efficient Bayesian parameter estimation in large discrete domains Proceedings of neural information processing systems (NIPS 98) 1998 MIT Press
18. G. Helmer, J.S.K. Wong, V. Honavar, L. Miller, and Y. Wang Lightweight agents for intrusion detection Journal of Systems and Software 67 2 2003 109 122
19. W. Jansen, P. Mell, T. Karygiannis, and D. Marks Applying mobile agents to intrusion detection and response Tech. Rep. 6416 1999 Computer Security Response Center, National Institute of Standards and Technology Gaithersburg, MD
20. F.V. Jensen Bayesian networks and decision graphs 2001 Springer Verlag
21. Y.G. Kim, M. Valtorta, and J. Vomlel A prototypical system for soft evidential update Applied Intelligence 21 1 2004 81 97
22. K.B. Laskey, S.M. Mahoney, and Ed. Wright Hypothesis management in situation-specific network construction Proceedings of the 17th annual conference on uncertainty in artificial intelligence (UAI-01) August 2001 301 309 Seattle, WA
23. S.L. Lauritzen, and D.J. Spiegelhalter Local computations with probabilities on graphical structures and their application to expert systems Journal of the Royal Statistical Society, Series B (Statistical Methodology) 50 2 1988 157 224
24. Moy J. OSPF Version 2. Internet draft, RFC-2178; 1997.
25. R.E. Neapolitan Probabilistic reasoning in expert systems: theory and algorithms 1990 John Wiley and Sons New York, NY
26. R.E. Neapolitan Learning Bayesian networks 2004 Pearson Prentice Hall Upper Saddle River, NJ
27. P.G. Neumann, and P.A. Porras Experiences with EMERALD to date Proceedings of the first USENIX workshop on intrusion detection and network monitoring 1999 Santa Clara, CA
28. J. Pearl Probabilistic reasoning in intelligent systems: networks of plausible inference 1988 Morgan-Kaufmann Publishers San Mateo, CA
29. R. Perlman Interconnections: bridges and routers 1992 Addison-Wesley Professional Reading, MA
30. A.A. Sebyala, T. Olukemi, and L. Sacks Active platform security through intrusion detection using Naïve Bayesian network for anomaly detection Proceedings of London communications symposium 2002
31. M. Singh, and M. Valtorta A new algorithm for the construction of Bayesian network structures from data Proceedings of the ninth annual conference on uncertainty in artificial intelligence (UAI-93) July 1993 259 264 Washington, DC
32. M. Singh, and M. Valtorta Construction of Bayesian belief networks from data: a brief survey and an efficient algorithm International Journal of Approximate Reasoning 12 2 February 1995 111 131
33. S. Snapp, and J. Brentano DIDS (Distributed Intrusion Detection System) - motivation, architecture, and an early prototype Proceedings of the 1991 national computer security conference 1991
34. E.H. Spafford, and D. Zamboni Intrusion detection using autonomous agents Computer Networks 34 4 2000 547 570
35. D.J. Spiegelhalter, A.P. Dawid, S.L. Lauritzen, and R.G. Cowell Bayesian analysis in expert systems Statistical Science 8 3 1993 219 283
36. S.W. Utete Local information processing for decision making in decentralized sensing networks Proceedings of the 11th international conference on industrial and engineering applications of artificial intelligence and expert systems (IEA/AIE-98) 1998 667 676 Benicassim, Castellon, Spain
37. A. Valdes, and K. Skinner Adaptive, model-based monitoring for cyber attack detection Proceedings of the third international workshop on recent advances in intrusion detection Springer-Verlag 2000 80 92
38. M. Valtorta, Y.-G. Kim, and J. Vomlel Soft evidential update for probabilistic multiagent systems International Journal of Approximate Reasoning 29 1 January 2002 71 106
39. J. Vomlel Probabilistic reasoning with uncertain evidence. Neural Network World International Journal on Neural and Mass-Parallel Computing and Information Systems 14 5 2004 453 456
40. Y. Xiang Probabilistic reasoning in multiagent systems: a graphical models approach 2002 Cambridge University Press Cambridge