A three-tier IDS via data mining approach

MineNet'07: Proceedings of the Third Annual ACM Workshop on Mining Network Data

Volumn , Issue , 2007, Pages 1-6

  Hwang, Tsong Song ^a   Lee, Tsung Ju ^a   Lee, Yuh Jye ^a  

^a NATIONAL TAIWAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Taiwan)

Author keywords

Activity profile; Blacklist; False alarm rate; Intrusion detection system; KDD'99; Multiclass SVMs; RIPPER; Whitelist

Indexed keywords

COMPUTER ARCHITECTURE; DATA STRUCTURES; DATA TRANSFER; INTRUSION DETECTION; SUPPORT VECTOR MACHINES;

ACTIVITY PROFILES; FALSE ALARM RATES; INTRUSION DETECTION SYSTEMS;

DATA MINING;

EID: 34548260327     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1269880.1269882     Document Type: Conference Paper

References (19)

1. C. J. C. Burges. A tutorial on support vector machines for pattern recognition. Data Mining and Knowledge Discovery, 2(2): 121-167, 1998.
2. C.-C. Chang and C.-J. Lin. LIBSVM: a library for support vector machines, 2001. Software available at http://www.csie.ritu.edu.tw/~cjlin/ libsvm.
3. W. W. Cohen. Fast effective rule induction. In ICML, pages 115-123, 1995.
4. N. Cristianini and J. Shawe-Taylor. An Introduction to Support Vector Machines. Cambridge University Press, Cambridge, 2000.
5. E. Frank, M. A. Hall, G. Holmes, R. Kirkby, and B. Pfahringer. WEKA - A machine learning workbench for data mining. In O. Maimon and L. Rokach, editors, The Data Mining and Knowledge Discovery Handbook, pages 1305-1314. Springer, 2005.
6. G. Fung and O. Mangasarian. Proximal support vector machine classifiers. In F. Provost and R. Srikant, editors, Proceedings KDD-2001: Knowledge Discovery and Data Mining, Auguest 26-29, 2001, San Francisco, CA, pages 77-86, New York, 2001. Asscociation for Computing Machinery. ftp://ftp.cs.wisc.edu/pub/dmi/tech-reports/01-02.ps.
7. J. Fürnkranz and G. Widmer. Incremental reduced error pruning. In ICML, pages 70-77, 1994.
8. C.-M. Huang, Y.-J. Lee, D. K. J. Lin, and S.-Y. Huang. Model selection for support vector machines via uniform design. The special issue on Machine Learning and Robust Data Mining of Computational Statistics and Data Analysis, 2006.
9. University of california department of information and computer science, kdd cup 99 intrusion detection dataset task description, 1999. http://kdd.ics.uci.edu//databases/kddcup99/kddcup99.html.
10. U. Kreßel. Pairwise classification and support vector machines. In B. Schölkopf, C.J.C. Burges and A. Smola, editors, Advances in kernel methods: support vector learning, pages 255-268, Cambridge, MA, USA, 1999. MIT Press.
11. W. Lee. A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems. PhD thesis, Columbia University, 1999.
12. Y.-J. Lee and O. L. Mangasarian. SSVM: A smooth support vector machine. Computational Optimization and Applications, 20:5-22, 2001. Data Mining Institute, University of Wisconsin, Technical Report 99-03. ftp://ftp.cs.wisc. edu/pub/dmi/tech-reports/99-03.ps.
13. R.. Lippmann, D. Fried, I. Graf, J. Haines, K. Kendall, D. McClung, D. Weber, S. Webster, D. Wyschogrod, R. Cunningham, and M. Zissman. Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. In Proceedings of the DARPA Information Survivability Conference and Exposition, Los Alamitos, CA, 2000. IEEE Computer Society Press.
14. R. Lippmann, J. W. Haines, D. J. Fried, J. Korba, and K. Das. The 1999 DARPA off-line intrusion detection evaluation. Computer Networks, 34(4):579-595, 2000.
15. D. J. Marchette. Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint. Springer-Verlag New York, Inc., Secaucus, NJ, USA, 2001.
16. D. R. Musicant. ASVM Software: active set support vector machine classification software, 2000. www.cs.wisc.edu/~musicant/data/asvm/.
17. B. Pfahringer. Winning the KDD99 classification cup: Bagged boosting. SIGKDD Explorations, 1(2):65-66, 2000.
18. S. J. Stolfo, S. Hershkop, K. Wang, O. Nimeskern, and C-W. Hu. A behavior-based approach to securing email systems. In MMMACNS: International Workshop on Methods, Models and Architectures for Network Security, LNCS, 2003.
19. V. N. Vapnik. The Nature of Statistical Learning Theory. Springer-Verlag, New York, 1995.