Combining genetic-based misuse and anomaly detection for reliably detecting intrusions in computer networks

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3617 LNCS, Issue , 2005, Pages 66-74

  Finizio, I ^a   Mazzariello, C ^a   Sansone, C ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

BENCHMARKING; CLASSIFICATION (OF INFORMATION); DATABASE SYSTEMS; GENETIC ALGORITHMS; PACKET NETWORKS; PATTERN RECOGNITION; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC;

ANOMALY DETECTION; GENERALIZATION ABILITY; PACKET CLASSIFICATION; ZERO-DAY ATTACKS;

COMPUTER NETWORKS;

EID: 33745157910     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11553595_8     Document Type: Conference Paper

References (16)

1. G. Vigna, R. Kemmerer, "Netstat: a network based intrusion detection system", Journal of Computer Security, vol. 7, no. 1, 1999.
2. S. Axelsson, Research in Intrusion Detection Systems: A Survey, TR 98-17, Chalmers University of Technology, 1999.
3. th National Information Security Conference, pp. 194-204, 1995.
4. A.K. Ghosh, A. Schwartzbard, "A Study in Using Neural Networks for Anomaly and Misuse Detection", Proc. 8'th USENIX Security Symposium, Aug. 26-29 1999, Washington DC.
5. T. Lane, C.E. Bradley, "Temporal Sequence learning and data reduction for anomaly detection", ACM Trans, on Inform, and System Security, vol. 2, no. 3, pp. 295-261, 1999.
6. W. Lee, S.J. Stolfo, "A framework for constructing features and models for intrusion detection systems", ACM Transactions on Inform. System Security, vol. 3, no. 4, pp. 227-261, 2000.
7. M. Esposito, C. Mazzariello, F. Oliviero, S.P. Romano, C. Sansone, "Real Time Detection of Novel Attacks by Means of Data Mining Techniques", Proceedings of the 7th International Conference on Enterprise Information Systems, Miami (USA), May 24-28, 2005 (in press).
8. S. C. Lee, D.V. Heinbuch, "Training a neural Network based intrusion detector to recognize novel attack", IEEE Trans. Syst, Man., and Cybernetic, Part-A, vol. 31, pp. 294-299, 2001.
9. M. Fugate, J.R. Gattiker, "Computer Intrusion Detection with Classification and Anomaly Detection, using SVMs", International Journal of Pattern Recognition and artificial Intelligence, vol. 17, no. 3, pp. 441-458, 2003.
10. G. Giacinto, F. Roli, L. Didaci, "Fusion of multiple classifiers for intrusion detection in computer networks", Pattern Recognition Letters, vol. 24, pp. 1795-1803, 2003.
11. G. Giacinto, F. Roli, L. Didaci, "A Modular Multiple Classifier System for the Detection of Intrusions", Lecture Notes in Computer Science vol. 2709, pp. 346-355, 2003.
12. L. P. Cordella, A. Limongiello, C. Sansone, "Network Intrusion Detection by a Multi Stage Classification System", Lecture Notes in Computer Science vol. 3077, Springer, Berlin, pp. 324-333, 2004.
13. S. Axelsson, "The Base-Rate Fallacy and the Difficulty of Intrusion Detection", ACM Trans, on Information and System Security, vol. 3, no.3, pp. 186-205, 2000.
14. th International Machine Learning Conference, Morgan Kaufmann, 1995.
15. J. McHugh, "Testing Intrusion Detection Systems: A Critique of the 1998 and 1999 DARPA Intrusion Detection System Evaluations as Performed by Lincoln Laboratory", ACM Transactions on Information and System Security, vol. 3, no. 4, pp. 262-294, 2000.
16. Y. Liu, K. Chen, X. Liao, W. Zhang, "A genetic clustering method for intrusion detection", Pattern Recognition vol. 37, 2004.