Real time detection of novel attacks by means of data mining techniques

ICEIS 2005 - Proceedings of the 7th International Conference on Enterprise Information Systems

Volumn , Issue , 2005, Pages 120-127

  Esposito, Marcello ^a   Mazzariello, Claudio ^a   Oliviero, Francesco ^a   Romano, Simon Pietro ^a   Sansone, Carlo ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

Intrusion detection; Traffic features

Indexed keywords

DATA MINING TECHNIQUES; DETECTION TECHNIQUE; INTRUSION DETECTION SYSTEMS; NETWORK TRAFFIC; OFF-LINE ANALYSIS; REAL-TIME DETECTION; RULE BASED; SECURITY ADMINISTRATOR; SET OF RULES; TRAFFIC FEATURES;

COMPUTER CRIME; DATA MINING; FEATURE EXTRACTION; HIERARCHICAL SYSTEMS; INFORMATION SYSTEMS;

INTRUSION DETECTION;

EID: 27244454402     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. (2004). Operation Experience with High-Volume Network Intrusion Detection. ACM.
2. Andersson, D. (1995). Detecting usual program behavior using the statistical component of the next-generation intrusion detection expert system (nides). Technical report, Computer Science Laboratory.
3. Bace, R. G. (2000). Intrusion Detection. Macmillan Technical Publishing.
4. Baker, A. R., Caswell, B., and Poor, M. (2004). Snort 2.1 Intrusion Detection - Second Edition. Syngress.
5. Barbara, D., Couto, J., Jajodia, S., Popyack, L., and Wu, N. (2001). Adam: Detecting intrusion by data mining. pages 11-16. IEEE. Workshop on Information Assurance and Security.
6. Cohen, W. W. and Singer, Y. (1999). A simple, fast, and effective rule learner.
7. Elkan, C. (2000). Results of the kdd99 classifier learning. In SIGKDD Explorations, volume 1, pages 63-64. ACM.
8. Fayyad, U., Piatetsky-Shapiro, G., and Smyth, P. (1996). From data mining to knowledge discovery in databases. AI Magazine, pages 37-52.
9. Laing, B. and Alderson, J. (2000). How to guide - implementing a network based intrusion detection system. Technical report, Internet Security Systems, Sovereign House, 57/59 Vaster Road, Reading.
10. Lee, W. and Stolfo, S. J. (2000). A framework for constructing features and models for intrusion detection systems. ACM Transactions on Information and System Security (TISSEC), 3(4):227-261.
11. Paxson, V. and Terney, B. (2004). Bro reference manual.
12. Sleator, D. and Tarjan, R. (1985). Self Adjusting Binary Search Trees. Journal of the ACM, 32(3).
13. Tyson, M. (2000). Derbi: Diagnosys explanation and recovery from computer break-ins. Technical report.
14. Vigna, G. and Kemmerer, R. (1999). Netstat: a network based intrusion detection system. Journal of Computer Security, 7(1).