A robust feature normalization scheme and an optimized clustering method for anomaly-based intrusion detection system

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4443 LNCS, Issue , 2007, Pages 140-151

  Song, Jungsuk ^a   Takakura, Hiroki ^b   Okabe, Yasuo ^b   Kwon, Yongjin ^c  

^a KYOTO UNIVERSITY   (Japan)

^b KYOTO UNIVERSITY   (Japan)

^c Hankuk Aviation University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMS; CLUSTER ANALYSIS; COMPUTER SYSTEMS; INTRUSION DETECTION; OPTIMIZATION;

INTRUSION DETECTION SYSTEM; LABELED TRAINING DATA;

ROBUSTNESS (CONTROL SYSTEMS);

EID: 38049129740     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-71703-4_14     Document Type: Conference Paper

References (16)

1. C. Warrender, S. Forrest, and B. Pearlmutter, "Detecting intrusions using system calls: alternative data models", In 1999 IEEE Symposium on Security and Privacy, pp. 133-145, IEEE Computer Society, 1999.
2. D. E. Denning, "An intrusion detection model", IEEE Transactions on Software Engineering, SE-13:222-232, 1987.
3. H. S. Javitz and A. Valdes, "The NIDES statistical component: description and justification", In Technical Report, Computer Science Laboratory, SRI International, 1993.
4. B. Everitt, S. Landau, and M. Leese, "Cluster Analysis", London: Arnold, 2001.
5. A. Jain and R. Dubes, "Algorithms for Clustering Data", Englewood Cliffs, NJ: Prentice-Hall, 1988.
6. Schölkopf, B., Platt, J., Shawe-Taylor, J., Smola, A., und Williamson, R., "Estimating the support of a high-dimensional distribution", Neural Computation. 13(7):1443-1471, 2001.
7. MCQUEEN, J, "Some methods for classification and analysis of multivariate observations ", In Proceedings of the Fifth Berkeley Symposium on Mathematical Statistics and Probability, pp. 281-297, 1967.
8. The third international knowledge discovery and data mining tools competition dataset KDD99-Cup http://kdd.ics.uci.edu/databases/kddcup99/ kddcup99.html, 1999.
9. L. Portnoy, E. Eskin and S. Stolfo, "Intrusion Detection with Unlabeled Data Using Clustering", In Proceedings of ACM CSS Workshop on Data Mining Applied to Security, 2001.
10. E. Eskin, A. Arnold, M. Prerau, L. Portnoy and S. Stolfo, "A Geometric Framework for Unsupervised Anomaly Detection : Intrusion Detection in Unlabeled Data", In Applications of Data Mining in Computer Security, 2002
11. Y. Guan, A. Ghorbani and N. Belacel, "Y-means : A Clustering Method for Intrusion Detection", In IEEE Canadian Conference on Electrical and Computer Engineering, Proceedings, 2003.
12. Laskov, P., Schäfer, C., Kotenko, I., "Intrusion detection in unlabeled data with quarter-sphere support vector machines", In: Proc. DIMVA, pp. 71-82, 2004.
13. K. Leung, and C. Leckie, "Unsupervised Anomaly Detection in Network Intrusion Detection Using Clusters", In Proceedings of Twenty-Eighth Australasian Computer Science Conference (ACSC2005), 2005.
14. L. Parsons, E. Haque, and H. Liu, "Subspace clustering for high dimensional data: A review", SIGKDD Explorations, 6(1), 2004, pp.90-105.
15. Lippmann, R.P., "Evaluating Intrusion Detection Systems: the 1998 DARPA Off-Line Intrusion Detection Evaluation", Proceedings of the 2000 DARPA Information Survivability Conference and Exposition, Vol. 2.
16. Ball, G. H. and Hall, D. J., "ISODATA, a novel method of data analysis and classification", Tech. Rep.. Stanford University, Stanford, CA, 1965.