Data fusion and cost minimization for intrusion detection

IEEE Transactions on Information Forensics and Security

Volumn 3, Issue 3, 2008, Pages 381-389

  Parikh, Devi ^a,b   Chen, Tsuhan ^a,b  

^a IEEE

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Cost minimization; Data fusion; DCMS; DLEARNIN; Pattern recognition for intrusion detection

Indexed keywords

ALARM SYSTEMS; ARTIFICIAL INTELLIGENCE; DATA FUSION; ERROR ANALYSIS; ERROR DETECTION; ERRORS; FEATURE EXTRACTION; FUSION REACTIONS; INFORMATION FUSION; LEARNING ALGORITHMS; LEARNING SYSTEMS; MISSILES; NUCLEAR PHYSICS; PATTERN RECOGNITION; SENSOR DATA FUSION;

ANOMALY DETECTIONS; COST MINIMIZATION; DCMS; DLEARNIN; ERROR RATE; FALSE ALARMS; HUMAN EXPERTS; MACHINE-LEARNING; MISUSE DETECTION; MULTIPLE SOURCES; OBJECTIVE FUNCTION; PATTERN RECOGNITION ALGORITHMS; PATTERN RECOGNITION FOR INTRUSION DETECTION; STATISTICAL PATTERN RECOGNITION;

INTRUSION DETECTION;

EID: 49549110728     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2008.928539     Document Type: Article

References (39)

1. J. McHugh, A. Christie, and J. Allen, "Defending yourself: The role of intrusion detection systems," IEEE Softw., vol. 17, no. 5, pp. 42-51, Sep./Oct. 2000.
2. G. Giacinto and F. Roli, "Intrusion detection in computer networks by multiple classifier systems," in Proc. Int Conf. Pattern Recognition, 2002, pp. 390-393.
3. L. Didaci, G. Giacinto, and F. Roli, "Ensemble learning for intrusion detection in computer networks," presented at the Workshop Machine Learning Methods Applications, Siena, Italy, Sep. 10-13, 2002.
4. J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, and E. Storner, State of the Practice of Intrusion Detection Technologies Tech. Rep. CMU/SEI-99-TR-028, 2000.
5. R. Duda, P. Hart, and D. G. Stork, Pattern Classification. New York: Wiley, 2001.
6. W. Lee and S. J. Stolfo, "A framework for constructing features and models for intrusion detection systems," ACM Trans. Inf. Syst. Security, vol. 3, no. 4, 2000.
7. G. Giacinto, F. Roli, and L. Didaci, "Fusion of multiple classifiers for intrusion detection in computer networks," in Pattern Recognit. Lett., 2003, vol. 24, no. 12, pp. 1795-1803.
8. S. C. Lee and D. V. Heinbuch, "Training a neural-network based intrusion detector to recognize novel attacks," IEEE Trans. Syst., Man, Cybern. A, Syst., Humans, vol. 31, no. 4, pp. 294-299, Jul. 2001.
9. A. K. Ghosh and A. Schwartzbard, "A study in using neural networks for anomaly and misuse detection," in Proc. USENIX Security Symp., 1999, p. 12.
10. J. Cannady, "An adaptive neural network approach to intrusion detection and response," Ph.D. dissertation, School Comput. Inform. Sci., Nova Southeastern University, Fort Lauderdale, FL, 2000.
11. J. M. Bonifkio, A. M. Cansian, A. C. P. L. F. de Carvalho, and E. S. Moreira, "Neural networks applied in intrusion detection systems," Proc. IEEE World Congr. Computer Intelligence, pp. 205-210, 1998.
12. C. Elkan, "Results of the KDD'99 classifier learning," in ACM Special Interest Group on Knowledge Discovery and Data Mining Explorations, 1, 2000.
13. The UCI KDD Aivhive, Information and Computer Science, [Online]. Available: http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html., Univ. California, Irvine.
14. "MIT Lincoln Laboratory-DARPA Intrusion Detection Evaluation." [Online]. Available: http://www.ll.mit.edu/IST/ideval/data/data_index.html.
15. M. Sabhnani and G. Serpen, "Application of machine learning algorithms to KDD intrusion detection dataset within misuse detection context," in Proc. Int. Conf. Machine Learning, Models, Technologies and Applications, 2003, pp. 209-215.
16. G. Giacinto, F. Roli, and L. Didaci, "A modular multiple classifier system for the detection of intrusions in computer networks," in Proc. IEEE Int. Conf. Multiple Classifier Systems, 2003, pp. 346-355.
17. G. Giacinto, R. Perdisci, and F. Roli, "Network intrusion detection by combining one class classifiers," presented at the Int. Conf. Image Analysis and Processing, Cagliari, Italy, 2005.
18. R. Polikar, L. Udpa, S. Udpa, and V. Honavar, "Learn++: An incremental learning algorithm for supervised neural networks," IEEE Tians. System, Man Cybern, C, Appl. Rev., vol. 31, no. 4, pp. 497-508, Nov. 2001, Special Issue on Knowledge Management.
19. Y. Freund and R. Schapire, "A decision theoretic generalization of online learning and an application to boosting," Comput. Syst. Scl., 1997.
20. D. Parikh and R. Polikar, "An ensemble based incremental learning approach to data fusion," IEEE Trans. Syst., Man, Cybern. A, Syst. Humans, vol. 37, no. 2, pp. 437-450, Apr. 2007.
21. D. Hall and J. Llinas, "An introduction to multisensor data fusion," Proc. IEEE, vol. 85, no. 1, pp. 6-23, Jan. 1997.
22. , D. Hall and J. Llinas, Eds., Handbook of Multisensor Data Fusion. Boca Raton, FL: CRC, 2001.
23. L. A. Klein, Sensor and Data Fusion Concepts and Applications. Belingham, WA: SPIE, 1999, vol. TT35.
24. J. Grim, J. Kittler, P. Pudil, and P. Somol, "Information analysis of multiple classifier fusion," presented at the Int. Workshop on Multiple Classifier Systems, Cambridge, U.K., 2001.
25. J. Kittler, M. Hatef, R. Duin, and J. Matas, "On combining classifiers," IEEE Trans. Pattern Anal Mach. Intell., vol. 20, no. 3, pp. 226-239, Mar. 1998.
26. L. O. Jimenez, A.M. Morales, and A. Creus, "Classification of hyperdimensional data based on feature and decision fusion approaches using projection pursuit, majority voting and neural networks," IEEE Trans. Geosci. Remote Sensors, vol. 37, no. 3, pp. 1360-1366, May 1999.
27. G. J. Briem, J. A. Benediktsson, and J. R. Sveinsson, "Use of multiple classifiers in classification of data from multiple data sources," in Proc. IEEE Geoscience Remote Sensor Symp., 2001, vol. 2, pp. 882-884.
28. F. M. Alkoot and J. Kittler, "Multiple expert system design by combined feature selection and probability level fusion," in Proc. Int. Conf. FUSION, 2000, vol. 2, no. 10, pp. THC5/9-THC516.
29. D. Wolpert, "Stacked generalization," Neural. Netw., 1992.
30. L. I. Kuncheva, "Switching between selection and fusion in combining classifiers: An experiment," IEEE Trans. Syst., Man, Cybern. B, Cybern., vol. 32, no. 2, pp. 146-156, Apr. 2002.
31. L. I. Kuncheva, "A theoretical study on six classifier fusion strategies," IEEE Trans. Pattern Anal. Mach. Intell., vol. 24, no. 2, pp. 281-286, Feb. 2002.
32. L. Kuncheva and C. Whitaker, "Feature subsets for classifier combination: An enumerative experiment," in Proc Int. Workshop on Multiple Classifier Systems, 2001.
33. N. Oza and K. Turner, "Input decimation ensembles: Decorrelation hrough dimensionality reduction," presented at the Int. Workshop on Multiple Classifier Systems, Cambridge, U.K., 2001.
34. A. Jain, A. Ross, and S. Prabhakar, "An introduction to biometric recognition," IEEE Trans. Circuits Syst. Video Technol., vol. 14, no. 1, pp. 4-20, Jan. 2004.
35. N. Lachiche and P. Flach, "Improving accuracy and cost of two-class and multi-class probabilistic classifiers using ROC curves," presented at the Int. Conf. Machine Learning, Washington, DC, 2003.
36. Y. Ma and X. Ding, "Robust real-time face detection based on cost-sensitive adaboost method," in Proc. IEEE Int. Conf. Multimedia Expo., 2003, pp. 465-468.
37. D. Parikh and T. Chen, "Classification-error cost minimization strategy: dCMS," in Proc. IEEE Statistical Signal. Processing Workshop, 2007, pp. 620-624.
38. D. Duda, P. Hart, and D. Stork, Pattern Classif, ser. 2/e. New York: Wiley, 2001, ch. 2, pp. 20-29.
39. M. Sabhnani and G. Serpen, "Why machine learning algorithms fail in misuse detection on KDD intrusion detection data set," Intell Data Anal., 2004.