Control theoretic approach to intrusion detection using a distributed hidden Markov model

IEEE Wireless Communications

Volumn 15, Issue 4, 2008, Pages 24-33

  Khanna, Rahul ^a   Liu, Huaping ^b  

^a INTEL CORPORATION   (United States)

^b OREGON STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AD HOC NETWORKS; DISTRIBUTED COMPUTER SYSTEMS; FREQUENCY RESPONSE; HIDDEN MARKOV MODELS; MARKOV PROCESSES;

AD-HOC WIRELESS NETWORKS; COMPLETE SYSTEMS; CONTROL ENGINE; CONTROL-THEORETIC APPROACH; FALSE POSITIVES; HIDDEN MARKOV MODELING; INTRUSION DETECTION METHODS; MALICIOUS ATTACKS; MULTIPLE NODES; NORMAL BEHAVIOR; PORT SCANNING; TRAFFIC MONITORING; WIRED NETWORKS;

INTRUSION DETECTION;

EID: 49749119545     PISSN: 15361284     EISSN: None     Source Type: Journal    
DOI: 10.1109/MWC.2008.4599218     Document Type: Article

References (17)

1. S. Ci et al., "Self-Regulating Network Utilization in Mobile Ad-Hoc Wireless Networks," IEEE Trans. Vehic. Tech., vol. 55, no. 4, July 2006, pp. 1302-10.
2. X. Du et al., "A Secure Routing Protocol for Heterogeneous Sensor Networks," Proc. IEEE GLOBECOM '06, San Francisco, CA, Nov. 2006.
3. L. R. Rabiner, "A Tutorial on Hidden Markov Models and Selected Applications in Speech Recognition," Proc. IEEE, vol. 77, Feb. 1989, pp. 257-86.
4. R. Khanna and H. Liu, "System Approach to Intrusion Detection Using Hidden Markov Model," Proc. 2006 Int'l. Conf. Commun, and Mobile Comp., July 2006, pp. 349-54.
5. S. S. Joshi and V. V. Phoha, "Investigating Hidden Markov Models Capabilities in Anomaly Detection," Proc. 43rd Annual Southeast Regional Conf.), Kennesaw, GA, Mar. 2005, pp. 98-103.
6. A. Arnes et al., "Using Hidden Markov Models to Evaluate the Risks of Intrusions: System Architecture and Model Validation," Proc. Int'l. Symp. Recent Advances in Intrusion Detection, Hamburg, Germany, Sept. 2006.
7. D. Ourston et al., "Applications of hidden Markov Models to Detecting Multi-stage Network Attacks," Proc. 36th Annual Hawaii Int'l. Conf. (Sys. Sci. '03), Jan. 2003.
8. W. Wang, X. -H. Guan, and X.-L. Zhang, "Modeling Program Behaviors by Hidden Markov Models for Intrusion Detection," Proc. Int'l. Conf. Machine Learning and Cybernetics, 2004, Aug. 2004, pp. 2830-35.
9. S. Zanero, "Behavioral Intrusion Detection," ISCIS '04, 2004.
10. D. Wagner and D. Dean, "Intrusion Detection Via Static Analysis," Proc. IEEE Symp. Research in Sec. and Privacy, Oakland, CA, 2001.
11. S. Manganaris et al., "A Data Mining Analysis of RTID Alarms," 2nd Int'l. Wksp. Recent Advances in Intrusion Detection, Purdue Univ., West Lafayette, IN, Sept. 1999.
12. G. Widmer and M. Kubat, "Learning in the Presence of Concept Drifting and Hidden Contexts," Machine Learning, vol. 23, 1996, pp. 69-101.
13. W. Fan, "Systematic Data Selection to Mine Concept-Drifting Data Streams," ACM SIGKDD, 2004.
14. S. Kullback and R. A. Leibler, "On Information and Sufficiency," Annals of Mathematical Statistics, vol. 22, Mar. 1951, pp. 79-86.
15. G. R. Grimmett and D. R. Stirzaker, Probability and Random Processes, 2nd ed., Clarendon Press, 1992.
16. T. K. Moon, "The Expectation-Maximization Algorithm," IEEE Signal Processing, Nov. 1996, pp. 47-59.
17. C. Warrender, S. Forrest, and B. Pearlmutter, "Detecting Intrusions Using System Calls: Alternative Data Models," IEEE Symp. Sec. and Privacy, Oakland, CA, 1999, pp. 133-45.