USAID: Unifying signature-based and anomaly-based intrusion detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3518 LNAI, Issue , 2005, Pages 702-712

  Li, Zhuowei ^a,b   Das, Amitabha ^a   Zhou, Jianying ^b  

^a NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

^b INSTITUTE FOR INFOCOMM RESEARCH   (Singapore)

Author keywords

[No Author keywords available]

Indexed keywords

ALARM SYSTEMS; FEATURE EXTRACTION; PROBLEM SOLVING;

FALSE ALARM RATES; INTRUSION DETECTION; KDD'99; USAID;

DATA MINING;

EID: 26944450506     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11430919_81     Document Type: Conference Paper

References (12)

1. C. Elkan. Results of the kdd'99 classifer learning contest, http://www.cs.ucsd.edu/users/elkan/clresults.html, 1999.
2. W. Fan, M. Miller, S. Stolfo, W. Lee, and P. Chan. Using artificial anomalies to detect unknown and known network intrusions. In Proceedings of First IEEE International Conference on Data Mining (ICDM'01), pages 123-130, 2001.
3. W. Fan and S. Stolfo. Ensemble-based adaptive intrusion detection. In Proceedings of SIAM International Conference on Data Mining 2002 (SDM2002), 2002.
4. S. Hofmeyr and S. Forrest. Architecture for an artificial immune system. Evolutionary Computation, 8(4):443-473, 2000.
5. K. Julisch. Clustering intrusion detection alarms to support root cause analysis. ACM Transaction on Information and System Security, 6(4):443-471, 2003.
6. K. Kendall. A database of computer attacks for the evaluation of intrusion detection systems. Master thesis, Massachusetts Institute of Technology, June 1999.
7. W. Lee and S. Stolfo. A framework for contructing features and models for intrusion detection systems. ACM Transactions on Information and System Security, 3(4):227-261, Nov. 2000.
8. Z. Li and A. Das. Visualizing and identifying intrusion context from system calls trace. In Proceedings of 20th Annual Computer Security Applications Conference. IEEE Computer Society, Dec. 2004.
9. M. Mahoney and P. Chan. Learning Nonstationary Models of Normal Network Traffic for Detecting Novel Attacks. In SIGKDD 2002, July 23-26 2002.
10. M. Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of USENIX LISA, 1999.
11. S. Rubin, S. Jha, and B. Miller. Automatic generation and analysis of nids attacks. In Proceedings of 20th Annual Computer Security Applications Conference, Tucson, AZ, USA, Dec. 2004. IEEE Computer Society.
12. D. Wagner and P. Soto. Mimicry attacks on host-based intrusion detection systems. In Proceedings of the 9th ACM conference on Computer and communications security, pages 255-264, 2002.