A hybrid network intrusion detection technique using random forests

Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

Volumn 2006, Issue , 2006, Pages 262-269

  Zhang, Jiong ^a   Zulkernine, Mohammad ^a  

^a QUEEN S UNIVERSITY   (Canada)

Author keywords

Data mining; Hybrid detection; Intrusion detection; Network security; Random forests

Indexed keywords

ALGORITHMS; DATA MINING; DATA STRUCTURES; SECURITY OF DATA; SECURITY SYSTEMS;

HYBRID DETECTION; INTRUSION DETECTION; NETWORK SECURITY; RANDOM FORESTS;

COMPUTER NETWORKS;

EID: 33750955638     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2006.7     Document Type: Conference Paper

References (20)

1. Elvis Tombini, Herve Debar, Ludovic Me, and Mireille Ducasse, "A Serial Combination of Anomaly and Misuse IDSes Applied to HTTP Traffic", 20th Annual Computer Security Applications Conference, Tucson, AZ, USA, December 2004.
2. Daniel Barbarra, Julia Couto, Sushil Jajodia, Leonard Popyack, and Ningning Wu, "ADAM: Detecting Intrusions by Data Mining", Proceedings of the 2001 IEEE, Workshop on Information Assurance and Security T1A3 1100 United States Military Academy, West Point, NY, June 2001.
3. Debra Anderson, Thane Frivold, and Alfonso Valdes, Next-Generation Intrusion Detection Expert System(NIDES) - A Summary, Technical Report SRI-CSL-95-07, SRI, May 1995.
4. L. Breiman, "Random Forests", Machine Learning 45(1):5-32, 2001.
5. Lan Guo, Yan Ma, Bojan Cukic, and Harshinder Singh, "Robust Prediction of Fault-Proneness by Random Forests", Proceedings of the 15th International Symposium on Software Reliability Engineering (ISSRE'04), pp. 417-428, Brittany, France, November 2004.
6. Bogdan E. Popescu, and Jerome H. Friedman, Ensemble Learning for Prediction, Doctoral Thesis, Stanford University, January 2004.
7. Ting-Fan Wu, Chin-Jen Lin, and Ruby C. Weng, "Probability Estimates for Multi-class Classification by Pairwise Coupling", The Journal of Machine Learning Research, Volume 5, December 2004.
8. Yimin Wu, High-dimensional Pattern Analysis in Multimedia Information Retrieval and Bioinformatics, Doctoral Thesis, State University of New York, January 2004.
9. KDD'99 datasets, The UCIKDD Archive, http://kdd.ics.uci.edu/databases/ kddcup99/kddcup99.html, Irvine, CA, USA, 1999.
10. J. Zhang and M. Zulkernine, "Network Intrusion Detection Using Random Forests", Proc. of the Third Annual Conference on Privacy, Security and Trust, pp. 53-61, St. Andrews, New Brunswick, Canada, October 2005.
11. M. Mahoney and P. Chan, "An Analysis of the 1999 DARPA/Lincoln Laboratory Evaluation Data for Network Anomaly Detection", Proceeding of Recent Advances in Intrusion Detection (RAID)-2003, Pittsburgh, USA, September 2003.
12. MIT Lincoln Laboratory, DARPA Intrusion Detection Evaluation, http://www.ll.mit.edu/IST/ideval/, MA, USA.
13. Charles Elkan, "Results of the KDD'99 Classifier Learning", SIGKDD Explorations 1(2): 63-64, 2000.
14. Leo Breiman and Adele Cutler, Random forests, http://stat-www.berkeley. edu/users/breiman/RandomForests/cc_home.htm, University of California, Berkeley, CA, USA.
15. WEKA software, Machine Learning, http://www.cs.waikato.ac.nz/ml/weka/, The University of Waikato, Hamilton, New Zealand.
16. J. Zhang and M. Zulkernine, "Anomaly based network intrusion detection with unsupervised outlier detection", The 2006 IEEE International Conference on Communications, Istanbul, Turkey, June 2006.
17. Carl Endorf, Eugene Schultz, and Jim Mellander, "Intrusion Detection & Pre-vention", McGraw-Hill/Osborne, 2004.
18. Wenke Lee and Salvatore J. Stolfo, "A Framework for Constructing Features and Models for Intrusion Detection Systems", ACM Transactions on Information and System Security (TISSEC), Volume 3, Issue 4, November 2000.
19. E. Eskin, A. Arnold, M. Prerau, L. Portnoy, and S. Stolfo, "A Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data", Applications of Data Mining in Computer Security, Kluwer, 2002.
20. Kingsly Leung and Christopher Leckie, "Unsupervised Anomaly Detection in Network Intrusion Detection Using Clusters", Australasian Computer Science Conference, Newcastle, NSW, Australia, 2005.