Apply data mining to defense-in-depth network security system

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn 2, Issue , 2005, Pages 159-162

  Huang, Nen Fu ^a,b   Kao, Chia Nan ^a   Hun, Hsien Wei ^a   Jai, Gin Yuan ^a   Lin, Chia Lin ^a  

^a NATIONAL TSING HUA UNIVERSITY   (Taiwan)

^b Broadweb Corp   (Taiwan)

Author keywords

Data Mining; Defense in depth; IDS; IPS; Network Security

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER CRIME; FAULT TOLERANT COMPUTER SYSTEMS; SECURITY OF DATA; SIGNAL DETECTION;

DEFENSE-IN-DEPTH; IDS; IPS; NETWORK SECURITY;

DATA MINING;

EID: 33744479744     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2005.118     Document Type: Conference Paper

References (17)

1. W. Lee, S.J. Stolfo, "AFramework for Constructing Features and Models for Intrusion Detection Systems", ACM Transactions on Information and System Security, Vol. 3, No. 4, Nov 2000, pp.227-261.
2. th International Conference on Artificial Intelligence, Portland, Oregon, 1996, pp. 709-716.
3. th International Conference on Artificial Intelligence, Hagen, Germany, 1995.
4. M. Li, W. Jia, W. Zhao, "Decision Analysis of Network-Based Intrusion Detection Systems for Denial-of-Service Attacks", Proceedings of IEEE International Conference on Infotech and Infonet (ICH 2001), pp. 1-6.
5. R. Srikant, "Fast Algorithms for Mining Association Rules and Sequential Patterns," PhD dissertation, University of Wisconsin - Madison, 1996.
6. CERT® Coordination Center (CERT/CC), http://www.cert.org/
7. The Open Source Network Intrusion Detection System, SNORT, http://www.snort.org/
8. T.F. Lunt and R Jagannathan, "A Prototype Real-Time Intrusion-Detection Expert System," In Proceedings of the IEEE Symposium on Security and Privacy, 1988, pp. 18-21.
9. D. Anderson, T. Frivold and A. Valdes. "NIDES: A Summary", http://www.sdl.sri.com/nides/index5.html
10. P.A. Porras and P.G. Neumann,"EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances," In Proceedings of the National Information Systems Security Conference, 1997, pp. 353-365.
11. S. Smaha, "Haystack audit trail analysis system," Status Report HS-STAT.TXT Haystack Laboratories, Colorado, Aug. 1990.
12. W. Lee and S. Stolfo, "Data Mining Approaches for Intrusion Detection," In Proceedings of the 7th USENIX Security Symposium, San Antonio, Texas, USA, 1998, pp.79-94.
13. D. Barbar, J. Couto, S. Jajodia, and N. Wu, "ADAM: Detecting Intrusions by Data Mining," Proceedings of the IEEE SMC Information Assurance Workshop, West Point, NY, 2001, pp.1100-1130.
14. RuleQuest Research Data Mining Tools, C/See 5.0, http://www.rulequest. com/
15. IBM DB2 Intilligent Miner, Intelligent Miner for Data, http://www-3.ibm.com/software/data/iminer/
16. William W. Cohen, RIPPER, http://www-2.cs.cmu.edu/~wcohen/
17. BroadWeb Corporation, NetKeeper - IPS, http://www.broadweb.com/