A distributed agent-based approach to intrusion detection using the lightweight PCC anomaly detection classifier

Proceedings - IEEE International Conference on Sensor Networks, Ubiquitous, and Trustworthy Computing

Volumn 2006 II, Issue , 2006, Pages 446-453

  Xie, Zongxing ^a   Quirino, Thiago ^a   Shyu, Mei Ling ^a   Chen, Shu Ching ^b   Chang, LiWu ^c  

^a University of Miami College of Engineering   (United States)

^b FLORIDA INTERNATIONAL UNIVERSITY   (United States)

^c NAVAL RESEARCH LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; CLASSIFIERS; COMPUTER SIMULATION; FEATURE EXTRACTION; INTELLIGENT AGENTS; LOCAL AREA NETWORKS; OBSTACLE DETECTORS;

COMMUNICATION ARCHITECTURE; DISTRIBUTED INTRUSION DETECTION SYSTEM (IDS); PRINCIPAL COMPONENT CLASSIFIER (PCC); RELATIVE ASSUMPTION MODEL;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 33845409757     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SUTC.2006.1636211     Document Type: Conference Paper

References (22)

1. The information systems technology group (IST) of mit lincoin laboratory, darpa intrusion detection evaluation data sets, http://www.ll.mit.edu/, 1998.
2. Kdd cup 1999 data. http://kdd.ics.uci.edu/databases/kddcup99/kddcup99. html, 1999.
3. Tcptrace. http://www.tcptrace.org, 2005.
4. D. Anderson, T. Frivold, and A. Valdes. Next-generation intrusion detection expert system (nides): A summary. SRI International Technical Report, 95(7):28-42, May 1995.
5. M. M. Breuning, H.-P. Kriegel, R. T. Ng, and J. Sander. Lof: Identifying density-based local outliers. ACM SIGMOD Conference, pages 93-104, May 2000.
6. D. Dasgupta and H. Brian. Mobile security agents for network traffic analysis. DARPA Information Survivability Conference and Exposition, 2:332-340, June 2001.
7. J. Hochberg, K. Jackson, C. Stallings, J. McClary, D. DuBois, and J. Ford. Nadir: An automated system for detecting network intrusions and misuse. Computer and Security, 12(3):235-248, May 1993.
8. V. Jacobson, C. Leres, and S. McCanne. tcpdump. anonymous@ftp.ee.lbl.gov, June 1989.
9. I. T. Jolliffe. Principal Component Analysis. Springer-Verlag, New York, second edition edition, 2002.
10. K. Labib and V. Vemuri. Detecting and visualizing denial-of-service and network probe attacks using principal component analysis. Third Conference on Security and Network Architectures, SAR'04, June 2004.
11. A. Lazarevic, L. Ertoz, V. Kumar, A. Ozgur, and J. Srivastava. A comparative study of anomaly detection schemes in network intrusion detection. Third SIAM Conference on Data Mining, May 2003.
12. W. Lee and S. J. Stolfo. A framework for constructing features and models for intrusion detection systems. ACM Transactions on Information and Systems Security, 3(4):227-261, November 2000.
13. Libcap. http://www.tcpdump.org, 2005.
14. H. Liu, L. Yu, D. Manoranjan, and H. Motoda. Active feature selection using classes. Seventh Pacific-Asia Conference on Knowledge Discovery and Data Mining, LNAI2637:474-485, May 2003.
15. D. Moore, G. Voelker, and S. Savage. Inferring internet denial-of-service activity. Usenix Security Symposium, pages 9-22, August 2001.
16. P. Rydesater. Matlab-TCP/UDP/IP toolbox. http://www.mathworks.com/ matlabcentral, 2005.
17. M.-L. Shyu, S.-C. Chen, K. Sarinnapakorn, and L. Chang. Principal component-based anomaly detection scheme. Foundations and Novel Approaches in Data Mining, pages 311-329, In press.
18. M.-L. Shyu, K. Sarinnapakorn, I. Kuruppu-Appuhamilage, S.-C. Chen, L. Chang, and T. Goldring. Handling nominal features in anomaly intrusion detection problems. The 15th International Workshop on Research Issues on Data Engineering (RIDE), in conjunction with The 21st International. Conference on Data Engineering, pages 55-62, April 2005.
19. Z. Telecom. Ip-traffic: an ip network monitoring and testing software. http://www.zti-telecom.com/pages/mainip.htm, 2005.
20. J. Tou and R. Gonzalez. Pattern recognition principles. 1974.
21. T. Verwored and R. Hunt. Intrusion detection techniques and approaches. Computer Communications, 25:1356-1365, 2002.
22. Y. Yang. An evaluation of statistic approaches to text categorization. 1999.