Trust-based classifier combination for network anomaly detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5180 LNAI, Issue , 2008, Pages 116-130

  Rehák, Martin ^a   Pěchouček, Michal ^a   Grill, Martin ^a,b   Bartos, Karel ^a,b  

^a CZECH TECHNICAL UNIVERSITY IN PRAGUE   (Czech Republic)

^b CESNET   (Czech Republic)

Author keywords

[No Author keywords available]

Indexed keywords

INTRUSION DETECTION; SOFTWARE AGENTS;

ANOMALY DETECTION MODELS; ANOMALY-DETECTION ALGORITHMS; CLASSIFICATION ERROR RATE; CLASSIFIER COMBINATION; NETWORK ANOMALY DETECTION; NETWORK BEHAVIOR ANALYSIS; NETWORK INTRUSION DETECTION; TRUST AND REPUTATION;

ANOMALY DETECTION;

EID: 57849104685     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-85834-8_11     Document Type: Conference Paper

References (31)

1. Scarfone, K., Mell, P.: Guide to intrusion detection and prevention systems (idps). Technical Report 800-94. NIST, US Dept. of Commerce (2007)
2. Denning, D.E.: An intrusion-detection model. IEEE Trans. Softw. Eng. 13, 222-232 (1987)
3. Cisco Systems: Cisco IOS NetFlow (2007). http://www.cisco.com/go/netflow
4. Čeleda, P., Kováčik, M., Koníř, T., Krmíček, V., Špringl, P., Žádník, M.: FlowMon Probe. Technical Report 31/2006, CESNET, z. s. p. o (2006), http://www.cesnet.cz/doc/techzpravy/2006/flowmon-probe/
5. Lazarevic, A., Ertöz, L., Kumar, V., Ozgur, A., Srivastava, J.: A comparative study of anomaly detection schemes in network intrusion detection. In: Proceedings of the Third SIAM International Conference on Data Mining (2003)
6. Bragg, R., Rhodes-Ousley, M., Strassberg, K.: Network Security; The Complete Reference. McGraw-Hill, New York (2004)
7. Sabater, J., Sierra, C.: Review on computational trust and reputation models. Artif. Intell. Rev. 24, 33-60 (2005)
8. Sabater, J., Sierra, C.: Reputation and social network analysis in multi-agent systems. In: Proceedings of AAMAS 2002, Bologna, Italy, pp. 475-482 (2002)
9. Ramchurn. S., Jennings, N., Sierra, C. Godo, L.: Devising a trust model for multi-agent interactions using confidence and reputation. Applied Artificial Intelligence 18, 833-852 (2004)
10. Castelfranchi, C., Falcone, R.: Principles of trust for mas: Cognitive anatomy, social importance, and quantification. In: Proceedings of the 3rd International Conference on Multi Agent Systems, p. 72. IEEE Computer Society Press, Los Alamitos (1998)
11. Josang, A., Gray, E., Kinateder, M.: Simplification and analysis of transitive trust networks. Web Intelligence and Agent Systems 4, 139-162 (2006)
12. Huynh, T.D., Jennings, N.R., Shadbolt, N.R.: An integrated trust and reputation model for open multi-agent systems. Journal of Autonomous Agents and Multi-Agent Systems 13. 119-154 (2006)
13. Rehak, M., Pechoucek, M.: Trust modeling with context representation and generalized identities. In: Klusch, M., Hindriks, K.V., Papazoglou, M.P., Sterling. L. (eds.) CIA 2007. LNCS (LNAI), vol. 4676. Springer, Heidelberg (2007)
14. Rettinger, A., Nickles, M., Tresp, V.: Learning initial trust among interacting agents. In: Klusch, M., Hindriks, K.V., Papazoglou, M.P., Sterling, L. (eds.) CIA 2007. LNCS (LNAI), vol. 4670, pp. 313-327. Springer, Heidelberg (2007)
15. Ertoz, L., Eilertson. E., Lazarevic, A., Tan, P.N., Kumar, V., Srivastava, J., Dokas, P.: MINDS - Minnesota Intrusion Detection System. In: Next Generation Data Mining. MIT Press, Cambridge (2004)
16. Xu. K., Zhang, Z.L., Bhattacharrya. S.: Reducing Unwanted Traffic in a Backbone Network. In: USENIX Workshop on Steps to Reduce Unwanted Traffic in the Internet (SRUTI). Boston, MA (2005)
17. Lakhina, A., Crovella, M., Diot, C.: Diagnosis Network-Wide Traffic Anomalies. In: ACM STGCOMM 2004, pp. 219-230. ACM Press, New York (2004)
18. Lakhina, A., Crovella, M., Diot, C.: Mining Anomalies using Traffic Feature Distributions. In: ACM SIGCOMM, August 2005, pp. 217-228. ACM Press, New York (2005)
19. Rehak, M., Pechoucek, M., Bartos, K., Grill, M., Celeda, P.: Network intrusion detection by means of community of trusting agents. In: IEEE/WIC/ACM International Conference on Intelligent Agent Technology (IAT 2007 Main Conference Proceedings) (IAT 2007). IEEE Computer Society Press. Los Alamitos (2007)
20. Rehák, M., Foltýn. L., Pěchoucček, M., Benda, P.: Trust Model for Open Ubiquitous Agent Systems. In: Intelligent Agent Technology. 2005 IEEE/WIC/ACM International Conference (2005); Number PR2416 in IEEE
21. Duda, R.O., Hart, P.E., Stork, D.G.: Pattern Classification, 2nd edn. John Wiley & Sons, New York (2001)
22. Lyon. G.: Nmap, http://insecure.org/nmap/
23. Yu, B., Singh. M.P.: Detecting deception in reputation management. In: AAMAS 2003. pp. 73-80. ACM Press, New York (2003)
24. Barber, K.S., Kim, J.: Belief revision process based on trust: Agents evaluating reputation of information sources. In: Falcone, R., Singh, M., Tan, Y.-H. (eds.) AA-WS 2000. LNCS (LNAI), vol. 2246, pp. 73-82. Springer, Heidelberg (2001)
25. Vu, L.-H., Aberer, K.: A probabilistic framework for decentralized management of trust and quality. In: Klusch, M., Hindriks, K.V., Papazoglou, M.P., Sterling, L. (eds.) CIA 2007. LNCS (LNAI). vol. 4676. pp. 328-342. Springer, Heidelberg (2007)
26. Kittler, J., Hatef, M., Duin, R.P.W., Matas, J.: On combining classifiers. IEEE Trans. Pattern Anal. Mach. Intell. 20, 226-239 (1998)
27. Meshulam, R., Reches, S., Yarden, A., Kraus, S.: Mlbp: Mas for large-scale biometric pattern recognition. In: AAMAS 2006: Proceedings of the fifth international joint conference on Autonomous agents and multiagent systems, pp. 1095-1097. ACM Press, New York (2006)
28. Valeur, F., Vigna, G., Kruegel, C., Kemmerer, R.A.: A comprehensive approach to intrusion detection alert correlation. IEEE Transactions on Dependable and Secure Computing 01. 146-169 (2004)
29. Shyu, M.L., Quirino, T. Xie. Z., Chen, S.C., Chang, L.: Network intrusion detection through adaptive sub-eigenspace modeling in multiagent systems. ACM Trans. Auton. Adapt. Syst. 2, 9 (2007)
30. IETF: RFC 4765:The Intrusion Detection Message Exchange Format (TDMEF), http://tools.ietf.org/rfc/rfc4765.txt
31. Rehak, M., Pechoucek. M., Celeda. P., Krmicek, V., Moninec, J. Dymacek, T., Medvigy, D.: High-performance agent system for intrusion detection in backbone networks. In: Klusch, M., Hindriks, K.V., Papazoglou, M.P., Sterling. L. (eds.) CIA 2007. LNCS (LNAI), vol. 4670. Springer, Heidelberg (2007)