Learning intrusion detection: Supervised or unsupervised?

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3617 LNCS, Issue , 2005, Pages 50-57

  Laskov, Pavel ^a   Düssel, Patrick ^a   Schäfer, Christin ^a   Rieck, Konrad ^a  

^a FRAUNHOFER FIRST   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

CLASSIFICATION (OF INFORMATION); COMPUTER SCIENCE; ERROR DETECTION; SECURITY SYSTEMS;

COMPARATIVE ANALYSIS; INTRUSION DETECTION; MACHINE LEARNING TECHNIQUES; ROC ANALYSIS;

LEARNING SYSTEMS;

EID: 33745163595     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11553595_6     Document Type: Conference Paper

References (20)

1. Bace, R., Mell, P.: NIST special publication on intrusion detection systems. National Institute of Standards and Technology (2001)
2. Portnoy, L., Eskin, E., Stolfo, S.: Intrusion detection with unlabeled data using clustering. In: Proc. ACM CSS Workshop on Data Mining Applied to Security. (2001)
3. Eskin, E., Arnold, A., Prerau, M., Portnoy, L., Stolfo, S.: A geometric framework for unsupervised anomaly detection: detecting intrusions in unlabeled data, In: Applications of Data Mining in Computer Security. Kluwer (2002)
4. Lazarevic, A., Ertoz, L., Kumar, V., Ozgur, A., Srivastava, J.: A comparative study of anomaly detection schemes in network intrusion detection,. In: Proc. SIAM Conf. Data Mining. (2003)
5. Laskov, P., Schäfer, C., Kotenko, I.: Intrusion detection in unlabeled data with quarter-sphere support vector machines. In: Proc. DIMVA. (2004) 71-82
6. Laskov, P., Schäfer, C., Kotenko, I., Müller, K.R.: Intrusion detection in unlabeled data with quarter-sphere support vector machines (extended version). Praxis der Informationsverarbeitung und Kommunikation 27 (2004) 228-236
7. Ghosh, A.K., Schwartzbard, A., Schatz, M.: Learning program behavior profiles for intrusion detection. In: Proc. of the 1st USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, USA (1999) 51-62 http://www.cigital.com/papers/download/usenix.id99.pdf.
8. Warrender, C., Forrest, S., Perlmutter, B.: Detecting intrusions using system calls: alternative data methods. In: Proc. IEEE Symposium on Security and Privacy. (1999) 133-145
9. Mukkamala, S., Janoski, G., Sung, A.: Intrusion detection using neural networks and support vector machines. In: Proceedings of IEEE Internation Joint Conference on Neural Networks. (2002) 1702-1707
10. Lee, W., Stolfo, S., Mok, K.: A data mining framework for building intrusion detection models, In: Proc. IEEE Symposium on Security and Privacy. (1999) 120-132
11. Stolfo, S.J., Wei, F., Lee, W., Prodromidis, A., Chan, P.K.: KDD Cup - knowledge discovery and data mining competition (1999). http://kdd.ics.uci.edu/ databases/kddcup99/kddcup99.html.
12. Lippmann, R., Cunningham, R.K., Fried, D.J., Kendall, K.R., Webster, S.E., Zissman, M.A.: Results of the DARPA 1998 offline intrusion detection evaluation. In: Proc. RAID 1999. (1999). http://www.ll.mit.edu/IST/ideval/pubs/ 1999/RAID_1999a.pdf.
13. Lippmann, R., Haines, J.W., Fried, D.J., Korba, J., Das, K.: The 1999 DARPA off-line intrusion detection evaluation. Computer Networks 34 (2000) 579-595
14. Lee, W., Stolfo, S.: A framework for constructing features and models for intrusion detection systems. In: ACM Transactions on Information and System Security. Volume 3. (2001) 227-261
15. Quinlan, J.: C4.5: Programs for Machine Learning. Morgan Kaufmann (1992)
16. Duda, R., P.E.Hart, D.G.Stork: Pattern classification, second edn. John Wiley & Sons (2001)
17. Rojas, R.: Neural Networks: A Systematic Approach. Springer-Verlag, Berlin, Deutschland (1996)
18. Friedman, J.; Regularized discriminant analysis. Journal of the American Statistical Association 84 (1989) 165-175
19. Schölkopf, B., Smola, A.: Learning with Kernels. MIT Press, Cambridge, MA (2002)
20. Harmeling, S., Dornhege, G., Tax, D., Meinecke, F., Müller, K.R.: From outliers to prototypes: ordering data. Unpublished manuscript (http://ida.first.fhg.de/~harmeli/ordering.pdf), submitted. (2004)