Multi-level alert clustering for intrusion detection sensor data

Annual Conference of the North American Fuzzy Information Processing Society - NAFIPS

Volumn 2005, Issue , 2005, Pages 748-753

  Siraj, Ambareen ^a   Vaughn, Rayford B ^a  

^a MISSISSIPPI STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION ASSURANCE; INTELLIGENT ALERT FUSION; INTRUSION DETECTION; SECURITY VIOLATIONS;

COMPUTER CRIME; CORRELATION METHODS; DATA MINING; INFORMATION SCIENCE; KNOWLEDGE BASED SYSTEMS; SENSOR DATA FUSION;

DATABASE SYSTEMS;

EID: 33744979029     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NAFIPS.2005.1548632     Document Type: Conference Paper

References (16)

1. D. Brubaker, "Fuzzy Cognitive Maps," EDN Access, Apr. 1996.
2. F. Cuppens, "Managing Alerts in a Multi-Intrusion Detection Environment," Proceedings: 17th Annual Computer Security Applications Conference, New Orleans, Louisiana, Dec. 2001.
3. O. M. Dain and R. K. Cunningham, "Building Scenarios from a Heterogeneous Alert Stream," IEEE Transactions on Systems, Man and Cybernetics, 2002.
4. H. Debar and A. Wespi, "Aggregation and Correlation of Intrusion-Detection Alerts," Proceedings: 4th International Symposium on Recent Advances in Intrusion Detection (RAID), Davis, CA, Oct. 2001.
5. Internet Security Systems, "RealSecure Network 10/100," http://www.iss.net/products_services/enterprise_protection/rsnetwork/sensor.php (current March 30, 2005).
6. K. Julisch, "Mining Alarm Clusters to Improve Alarm Handling Efficiency," Proceedings: 17th Annual Computer Security Applications Conference (ACSAC'01), New Orleans, LA, December 10-14, 2001.
7. B. Kosko, "Fuzzy Cognitive Maps," International Journal of Man-Machine Studies, vol. 24, 1986, pp. 65-75.
8. B. Kosko, Neural Networks and Fuzzy Systems: A Dynamical Systems Approach to Machine Intelligence, Prentice Hall, Englewood Cliffs, NJ, 1992.
9. B. Kosko, Fuzzy Engineering, Prentice Hall, Upper Saddle River, NJ, 1997.
10. M.I.T Lincoln Laboratory, "2000 DARPA Intrusion Detection Scenario Specific Data Sets," http://www.ll.mit.edu/IST/ideval/data/2000/ 2000_data_index.html (current March 30, 2005)
11. P. Ning, "TIAA: A Toolkit for Intrusion Alert Analysis," http://discovery.csc.ncsu.edu/software/correlator/ current March 30, 2005).
12. A Siraj, S.M. Bridges, and R.B. Vaughn, "Fuzzy Cognitive Maps for Decision Support in an Intelligent Intrusion Detection System," Proceedings: International Fuzzy Systems Association/North American Fuzzy Information Processing Society (IFSA/NAFIPS) Conference on Soft Computing, Vancouver, Canada, Jul. 2001.
13. A. Siraj, R. B. Vaughn, "A Cognitive Model for Alert Correlation in a Distributed Environment", To appear in Proceedings: IEEE International Conference on Intelligence and Security Informatics, to be held in Atlanta, Georgia, May 2005.
14. D. Stylios and P. P. Groumpos, "A Soft Computing Approach for Modeling the Supervisor of Manufacturing Systems," Journal of Intelligent and Robotics Systems, vol. 26, no. 3-4, 1999, pp. 389-403.
15. A. Valdes and K. Skinner, "Probabilistic Alert Correlation," Proceedings: 4th International Symposium on Recent Advances in Intrusion Detection (RAID), 2001.
16. J.Q. Xin, J.E. Dickerson, and J.A. Dickerson, "Fuzzy Feature Extraction and Visualization for Intrusion Detection," Proceedings: FUZZ-IEEE, St. Louis, MO, 2003.