Framework of an immunity-based anomaly detection system for user behavior

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4694 LNAI, Issue PART 3, 2007, Pages 821-829

  Okamoto, Takeshi ^a   Ishida, Yoshiteru ^b  

^a KANAGAWA INSTITUTE OF TECHNOLOGY   (Japan)

^b TOYOHASHI UNIVERSITY OF TECHNOLOGY   (Japan)

Author keywords

Anomaly detection; Computer security; Hidden Markov model; Immunity based system; ROC

Indexed keywords

HIDDEN MARKOV MODELS; LOCAL AREA NETWORKS; MOBILE AGENTS;

ANOMALY DETECTION; DIVERSITY GENERATION; IMMUNITY-BASED SYSTEM; MALICIOUS USERS;

INTRUSION DETECTION;

EID: 38049096241     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-74829-8_100     Document Type: Conference Paper

References (9)

1. Lane, T.: Hidden Markov models for human/computer interface modeling. In: IJCAI-99 Workshop on Learning about Users, pp. 35-44 (1999)
2. Schonlau, M., DuMouchel, W., Ju, W., Karr, A., Theus, M., Vardi, Y.: Computer intrusion: Detecting masquerades. Statistical Science 16(1), 58-74 (2001)
3. Okamoto, T., Watanabe, Y., Ishida, Y.: Test statistics for a masquerader detection system - a comparison between hidden markov model and other probabilistic models. Transactions of the ISCIE 16(2), 61-69 (2003)
4. Warrender, C., Forrest, S., Pearlmutter, B.: Detecting intrusions using system calls: alternative data models. In: the 1999 IEEE Symposium on Security and Privacy, pp. 133-145. IEEE Computer Society Press, Los Alamitos (1999)
5. Okamoto, T., Watanabe, T., Ishida, Y.: Towards an immunity-based system for detecting masqueraders. In: Palade, V., Howlett, R.J., Jain, L. (eds.) KES 2003. LNCS, vol. 2774, pp. 488-495. Springer, Heidelberg (2003)
6. Okamoto, T., Watanabe, T., Ishida, Y.: Mechanism for generating immunity-based agents that detect masqueraders. In: Negoita, M.G., Howlett, R.J., Jain, L.C. (eds.) KES 2004. LNCS (LNAI), vol. 3214, pp. 534-540. Springer, Heidelberg (2004)
7. Okamoto, T., Ishida, Y.: Towards an immunity-based anomaly detection system for network traffic. In: Gabrys, B., Howlett, R.J., Jain, L.C. (eds.) KES 2006. LNCS (LNAI), vol. 4252, pp. 123-130. Springer, Heidelberg (2006)
8. Forrest, S., Hofmeyr, S., Somayaji, A., Longstaff, T.: A sense of self for Unix processes. In: IEEE Symposium on Security and Privacy, pp. 120-128. IEEE Computer Society Press, Los Alamitos (1996)
9. Juang, B.H., Rabiner, L.R.: A probabilistic distance measure for hidden markov models. AT&T Technical Journal 64(2), 391-408 (1985)