The effects of algorithmic diversity on anomaly detector performance

Proceedings of the International Conference on Dependable Systems and Networks

Volumn , Issue , 2005, Pages 216-225

  Tan, Kymie M C ^a   Maxion, Roy A ^a  

^a Carnegie Mellon University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMIC DIVERSITY; ANOMALY-BASED INTRUSION DETECTION; CORRELATION TECHNIQUES; PERFORMANCE SHORTCOMING;

CORRELATION METHODS; DETECTORS; PARAMETER ESTIMATION; SECURITY OF DATA; SECURITY SYSTEMS;

ALGORITHMS;

EID: 27544486362     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DSN.2005.91     Document Type: Conference Paper

References (21)

1. James P. Anderson, "Computer Security Threat Monitoring and Surveillance", Technical report, James P. Anderson Co., Fort Washington, Pennsylvania, April 1980.
2. Matt Bishop, Steven Cheung, and Chris Wee, "The Threat from the Net", 34(8) IEEE Spectrum, pages 56-63, August 1997.
3. Herve Debar, Marc Dacier and Andreas Wespi, "Towards a Taxonomy of Intrusion-Detection Systems", Computer Networks, 31(8), pages 805-822, April 1999.
4. Dorothy Denning, "An Intrusion-Detection Model", IEEE Transactions on Software Engineering, SE-13(2). pages 222-232, Feb. 1987.
5. Bev Littlewood and Lorenzo Strigini, "Redundancy and Diversity in Security", In Proceedings ESORICS 2004, 9th European Symposium on Research in Computer Security, pages 423-438, Sophia Antipolis, France, September 2004, Lecture Notes In Computer Science # 3193, Springer-Verlag, Berlin, 2004.
6. Herve Debar, Monique Becker, and Didier Siboni, "A Neural Network Component for an Intrusion Detection System", In Proceedings of the 1992 IEEE Computer Society Symposium on Research in Security and Privacy, pages 240-250, 04-06 May 1992, Oakland, CA. IEEE Computer Society Press, Los Alamitos, CA.
7. Stephanie Forrest, Steven A. Hofmeyr, Anil Somayaji, and Thomas A. Longstaff, "A Sense of Self for Unix Processes", In Proc. 1996 IEEE Symp. on Security and Privacy, pp. 120-128, 06-08 May 1996, Oakland, CA. IEEE Computer Security Press, Los Alamitos, CA.
8. Kevin L. Fox, Ronda R. Henning, Jonathan H. Reed, and Richard Simonian, "A Neural Network Approach Towards Intrusion Detection", In Proceedings of the 13th National Computer Security Conference, pages 125-134, 01-04 October 1990, Washington DC.
9. Anup Gosh, Aaron Schwartzbard and Michael Schatz "Learning Program Behavior Profiles for Intrusion Detection", In Proceedings of the 1st USENIX Workshop on Intrusion Detection and Network Monitoring, pages 51-62, 09-12 April 1999, Santa Clara, CA. USENIX Association, Berkeley, CA.
10. Anup Gosh, James Wanken, and Frank Charron "Detecting Anomalous and Unknown Intrusions Against Programs", In Proceedings of the 14th Annual Computer Security Applications Conference, pages 259-267, Scottsdale, AZ, 07-11 December 1998. IEEE Computer Security Press, Los Alamitos, CA.
11. Sandeep Kumar, "Classification and Detection of Computer Intrusions", Ph.D. Dissertation, Purdue University, West Lafayette, Indiana, August 1995.
12. Somesh Jha, Kymie M. C. Tan, and Roy A. Maxion, "Markov Chains, Classifiers, and Intrusion Detection", In Proceedings of the 14th IEEE Computer Security Foundations Workshop, pages 206-219, 11-13 June 2001, Cape Breton, Nova Scotia, Canada.
13. Terran Lane and Carla E. Brodley, "Sequence Matching and Learning in Anomaly Detection for Computer Security", In Proc. of AAAI-97 Workshop: AI Approaches to Fraud Detection and Risk Management, AAAI Press, pp. 43-49, 27-31 July 1997, Providence, RI.
14. Roy A. Maxion and Kymie M. C. Tan, "Benchmarking Anomaly-Based Detection Systems", In Proceedings of the International Conference on Dependable Systems and Networks, pages 623-630, 25-28 June 2000, New York, NY. IEEE Computer Society Press.
15. Roy A. Maxion and Kymie M. C. Tan, "Anomaly Detection in Embedded Systems", IEEE Transactions on Computers, 51(2), pages 108-120, February 2002.
16. Kymie M. C. Tan; Kevin S. Killourhy, and Roy A. Maxion, "Undermining an Anomaly-Based Intrusion Detection System Using Common Exploits", In Proceedings of the Fifth International Symposium on Recent Advances in Intrusion Detection (RAID-2002), Andreas Wespi, Giovanni Vigna and Luca Deri (Eds.), 16-18 October 2002, Zurich, Switzerland, pp. 54-73. Lecture Notes in Computer Science #2516, Springer-Verlag, Berlin, 2002.
17. Kymie M. C. Tan and Roy A. Maxion, " 'Why 6?' Defining the Operational Limits of slide, an Anomaly-Based Intrusion Detector", In Proceedings 2002 IEEE Symposium on Security and Privacy, pages 188-201, 12-15 May 2002, Oakland, CA. IEEE Computer Society Press, Los Alamitos, CA.
18. Henry S. Teng, Kaihu Chen, and Stephen C-Y Lu, "Security Audit Trail Analysis Using Inductively Generated Predictive Rules", In Proc. of the Sixth Conference on Artificial Intelligence Applications, pages 24-29, IEEE Service Center, Piscataway, NJ, March 1990.
19. David Wagner and Paolo Soto. "Mimicry attacks on host-based intrusion detection systems", In Proceedings of the 9th ACM Conference on Computer and Communications Security, pp. 55-264, 18-22 Nov. 2002, Washington, DC. ACM Press, New York, NY, USA.
20. Christina Warrender, Stephanie Forrest and Barak Pearlmutter, "Detecting Intrusions Using System Calls: Alternative Data Models", In Proceedings 1999 IEEE Symposium on Security and Privacy, pages 133-145, 09-12 May 1999, Oakland, CA. IEEE Computer Security Press, Los Alamitos, CA.
21. J. Zurada. "Introduction to artificial neural systems," West Publishing Co., St. Paul, MN, 1992.