Mdlcompress for intrusion detection: Signature inference and masquerade attack

Proceedings - IEEE Military Communications Conference MILCOM

Volumn , Issue , 2007, Pages

  Evans, Scott ^a   Eiland, Earl ^a   Markham, Stephen ^a   Impson, Jeremy ^b   Laczo, Adam ^b  

^a GE GLOBAL RESEARCH   (United States)

^b LOCKHEED MARTIN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ALGORITHMIC INFORMATION THEORY; ANOMALOUS EVENTS; BREAST CANCERS; DATA SETS; DNA SEQUENCE MOTIFS; GRAMMAR INFERENCE; KOLMOGOROV COMPLEXITY (KC); LINEAR TIME; MASQUERADE ATTACKS; MINIMUM DESCRIPTION LENGTH (MDL); SYSTEM CALLS;

COMPUTER CRIME; INFERENCE ENGINES; INFORMATION THEORY; MILITARY COMMUNICATIONS; MILITARY OPERATIONS; NUCLEIC ACIDS; ORGANIC ACIDS; PARALLEL PROCESSING SYSTEMS; SET THEORY;

INTRUSION DETECTION;

EID: 47949129926     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MILCOM.2007.4455304     Document Type: Conference Paper

References (22)

1. Axellson, S., the Base-Rate Fallacy and the Difficulty of Intrusion Detection", Transactions on Information and System Security, 2000, 3:3, pages 186-205.
2. Liu, A. Martin, C., Hetherington, T, and Matzner S., "A Comparison of System Call Feature Representations for Insider Threat Detection", Proceedings of the 2005 IEEE Workshop on Information Assurance and Security United States Military Academy, West Point, NY
3. R. A. Maxion and T. N. Townsend. "Masquerade Detection using Truncated Command Lines". In International Conference on Dependable Systems and Networks (DSN-02), pages 219-228, Los Alamitos, California, 23-26 June 2002. IEEE Computer Society Press. Washington, D.C.
4. R. A. Maxion and T. N. Townsend. "Masquerade Detection Augmented with Error Analysis". IEEE Transactions on Reliability, 53(1): 124-147, March 2004.
5. Schonlau, M., DuMouchel, W., Ju, W., Karr, A., Theus, M., Vardi, Y. (2001), "Computer Intrusion: Detecting Masquerades," Statistical Science, 2001;16(1):58-74.
6. http://www.schonlau.net/
7. R. A. Maxion. "Masquerade Detection using Enriched command lines." In International Conference on Dependable Systems and Networks (DSN-03), pages 5-14, Los Alamitos, California, 22-25 June 2003. IEEE Computer Society Press. San Francisco, California.
8. th IEEE International Workshop on Information Assurance", Royal Holloway, UK, April, 2006.
9. Evans, S. C., Barnett, B. Saulnier, G. J. and Bush, S. F., "MDL Principles for Detection and Classification of FTP Exploits," MILCOM 2004.
10. Bush, S.F., and Evans, S.C., "Information Assurance Design and Assessment: Final Report", General Electric Research and Development Center, August 2002.
11. Goel, S. and Bush, Stephen F., Kolmogorov Complexity estimates for Detection of Viruses in Biologically Inspired Security Systems: A Comparison with Traditional Approaches.", Complexity, 9:2, pages 54-73, 2003.
12. Benedetto, Caglioli and Loreto, "Language Trees and Zipping", Physical Review Letters, 88, 2002. Grünwald, et al. Advances in Minimum Description Length: Theory and Applications. MIT Press, 2005
13. de la Higuera, C., "A Bibliographical Study of Grammatical Inference", Pattern Recognition Vol. 38, pages1332-1348, 2005.
14. Evans, S. C., Saulnier, G. J. and Bush, S. F., "A New Universal Two Part Code for Estimation of String Kolmogorov Complexity and Algorithmic Minimum Sufficient Statistic," DIMACS Workshop on Complexity and Inference, 2003, http://www.stat.ucla.edu/cocteau/dimacs/evans.pdf
15. Evans, S. C., Markham, T. S. , Torres, A., Kourtidis, A. and Conklin, D. "An Improved Minimum Description Length Learning Algorithm for Nucleotide Sequence Analysis," Proceedings of IEEE 40th Asilomar Conference on Signals, Systems and Computers, Pacific Grove, CA, November 2006.
16. Evans, S. C., Kourtidis, A., Markham, T. S, Miller, J., Conklin, D. and Torres, A. "MicroRNA Target Detection and Analysis for Genes Related to Breast Cancer Using MDLcompress," EURASJP Journal on Bioinformatics and Systems Biology, Special Issue on Information Theoretic Methods for Bioinformatics, September 2007.
17. Latendresse, M., "Masquerade Detection via Customized Grammars", Lecture Notes in Computer Science, 3548: 141-159, June 2005.
18. Nevill-Manning, C.G. and Witten, I.H. (1997) "Identifying Hierarchical Structure in Sequences in a Linear Time Algorithm," Journal of Artificial Intelligence Research, 7, 67 82.
19. Nevill-Manning C.G. and Witten, I.H. http://sequitur.info/, Department of Computer Science, University of Waikato, Hamilton, New Zealand, May 22, 2007
20. Gacs, P., Tromp, J. T., and Vitanyi, P. "Algorithmic Statistics", IEEE Transactions on Information Theory, Vol 47, No 6, September 2001, pp. 2443-2463.
21. Cover, T. M. and Thomas, J. A. Elements of Information Theory. Wiley, NY, 1991
22. Li, M. and Vitányi, P. An Introduction to Kolmogorov Complexity and Its Applications, Springer, NY 1997