The architecture of host-based intrusion detection model generation system for the frequency per system call

Proceedings - 2006 International Conference on Hybrid Information Technology, ICHIT 2006

Volumn 2, Issue , 2006, Pages 277-283

  Paek, Seung Hyun ^a   Oh, Yoon Keun ^a   Yun, JooBeom ^a   Lee, Do Hoon ^a  

^a National Security Technology Institute   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; CLASSIFICATION (OF INFORMATION); DATA MINING; DECISION TREES; MATHEMATICAL MODELS;

CLASSIFICATION ALGORITHM; HOST-BASED INTRUSION DETECTION; NETWORK AREA;

INTRUSION DETECTION;

EID: 34247271949     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICHIT.2006.253624     Document Type: Conference Paper

References (18)

1. Symantec, Symantec Internet Security Threat Report: Trends for July 06 - December 05, Vol. IX, Mar. 2006.
2. Lee, W., and Stolfo, S.J. 2000. A Framework For Constructing Features and Models For Intrusion Detection Systems. ACM Transactions on Information and System Security. 3(4):227-261.
3. C. Warrender, S. Forrest, and B. A. Pearlmutter, "Detecting Intrusions using System Calls: Alternative Data Models," in IEEE Symposium on Security and Privacy, pp. 133-145, 1999.
4. D. K. Kang, D. Fuller, V. Honavar, "Learning Classifiers for Misuse and Anomaly Detection Using a Bag of Systems Calls Prepresentation," in Proc. of 6th IEEE Information Assurance Workshop, pp. 118-125, West Point, New York, June 2005.
5. P. C. Pfleeger, L. S. Pfleeger, Security in Computing 3rd Ed., Prentice Hall, Dec. 2002.
6. V. Paxson, "Bro: A System for Detecting Network Intruders in Real-Time," Computer Networks, 31(23-24), pp. 2435-2463, Dec. 1999.
7. J. Beale et. al., Snort 2.1 Intrusion Detection, Syngress, May. 2004..
8. M. Weber, M. Schmid, M. Schatz, D. Geyer, "A Toolkit for Detecting and Analyzing Malicious Software," Annual Computer Security Applications Conference, Las Vegas, Nevada, USA, Dec. 2002.
9. Ertoz, L., Eilertson, E., Lazarevic, A., Tan, P., Srivastava, J., Kumar, V., Dokas, P., "Chpater 3. The MINDS - Minnesota Intrusion Detection System," Next Generation Data Mining, MIT Press, 2004.
10. J. Pei, S. Upadhyaya, F. Farooq, V. Govindaraju, "Data Mining for Intrusion Detection: Techniques, Applications and Systems," In the 20th Int'l Conf. on Data Engineering, Boston, USA, Mar. 2004.
11. E. Eskin, A. Arnold, M. Prerau, L. Portnoy, and S. Stolfo, "A geometric framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data," in book Applications of Data Mining in Computer Security, Kluwer, (Eds. D. Barbara and S. Jajodia), 2002.
12. J. R. Quinlan, C4.5: Programs for Machine Learning, Morgan Kaufmann Publishers, 1993.
13. C. Cortes and V. Vapnik, "Support-Vector Networks," Machine Learning, vol. 20, no. 3, pp. 273-297, 1995.
14. J. C. Platt, "Fast Training of Support Vector Machines using Sequential Minimal Optimization," Advances in Kernel Methods: Support Vector Learning, pp. 185-208, 1999.
15. A. McCallum, K. Nigam, "A Comparison of Event Models for Naive Bayes Text Classication," in AAAI-98 Workshop on Learning for Text Categorization, 1998.
16. D. Aha, D. Kibler, "Instance-based Learning Algorithms, "Machine Learning, vol.6, pp. 37-66, 1991.
17. University of New Mexico, "Computer Immune Systems Project," http://www.cs.unm.edu/~immsec/begin.html, 1997.
18. I. H. Witten, E. Frank. Data Mining: Practical Machine Learning Tools and Techniques 2nd ed., Morgan Kaufmann, San Francisco, 2005.