A sampling method for intrusion detection system

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5297 LNCS, Issue , 2008, Pages 419-428

  Ning, Zhuo ^a,b   Gong, Jian ^a,b  

^a SOUTHEAST UNIVERSITY   (China)

^b Key Laboratory of Computer Network Technology of Jiangsu Province   (China)

Author keywords

Feature entropy; Intrusion detection system; Multistage bloom filter; Sampling

Indexed keywords

COMPUTER CRIME; ENTROPY; FEATURE EXTRACTION; NETWORK SECURITY; NEXT GENERATION NETWORKS; SAMPLING;

DISTRIBUTED ARCHITECTURE; FEATURE ENTROPY; INTRUSION DETECTION SYSTEMS; MEMORY BOTTLENECK; MULTISTAGE BLOOM FILTER; SAMPLING STRATEGIES; TRAFFIC ANOMALIES; TRAFFIC FEATURES;

INTRUSION DETECTION;

EID: 57049117858     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-88623-5_43     Document Type: Conference Paper

References (10)

1. Bos, H., Huang, K.: Towards Software-Based Signature Detection for Intrusion Prevention on the Network Card. In: Valdes, A., Zamboni, D. (eds.) RAID 2005. LNCS, vol. 3858, pp. 102-123. Springer, Heidelberg (2006)
2. Cho, Y., Mangione-Smith, W.: Fast reconfiguring deep packet filter for 1.+gigabit network. In: IEEE Symposium on Field-Programmable Custom Com[putting Machines (FCCM), NaPa, CA (April 2005)
3. Fanklin, R., Caraver, D., Hutchings, B.: Assisting network intrusion detection with reconfigurable hardware. In: Proceedings from filed Programmable Custom Computing Machines (2002)
4. Chen, X.x., fang, B.x.: The architecture of Intrusion detection system in high-speed network. Computer research development, [J] 41(9), 1481-1487 (2004)
5. Charitakis, I., Anagnostakis, K., Markatos, E.: An active traffic splitter architecture for intrusion detection. In: Proceedings of 11th IEEE/ACM International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS 2003), Orlando, October 2003, pp. 238-241 (2003)
6. Lakhina, A., Crovella, M., Diot, C.: Mining Anomalies Using Traffic Feature Distributions. In: Proc. ACM SIGCOMM 2005, Philadelphia, PA, USA (August 2005)
7. J.MAI, ,SRIDHARDAN, A.,Chuah, C.N, Aang, H., Impack of packet sampling on portscan detection. IEEE Journal on Selected Areas in Communication(2006).
8. Mai, J., Chuah, C.N., Sridharan, A., Ye, T., Zang, H.: Is sampled data sufficient for anomaly detection? In: Proc. of the 6th ACM SIGCOMM on Internet measurement, Brazil (2006)
9. Brauckhoff, D., Tellenbach, B., Wagner, A.: Impact of packet sampling on anomaly detection metrics. In: Proc. ACM SIGCOMM 2006, Rio de Janeriro, Brazil (2006)
10. Estan, C., Varghese, G.: New Directions in Traffic Measurement and Accounting[C]. In: SIGCOMM 2002, pp. 270-313 (August 2003)