A new statistical approach to network anomaly detection

Proceedings of the 2008 - International Symposium on Performance Evaluation of Computer and Telecommunication Systems, SPECTS 2008

Volumn , Issue , 2008, Pages 441-446

  Callegari, Christian ^a   Vaton, Sandrine ^b   Pagano, Michele ^a  

^a UNIVERSITY OF PISA   (Italy)

^b ECOLE DES MINES DE NANTES   (France)

Author keywords

High order Markov chain; Intrusion Detection System; Mixture transition model; Non homogeneous Markov chain

Indexed keywords

COMPUTER CRIME; INTERNET; MARKOV PROCESSES; NETWORK SECURITY; SECURITY OF DATA; TELECOMMUNICATION; TELECOMMUNICATION LINKS; TELECOMMUNICATION SYSTEMS;

HIGH ORDER MARKOV CHAIN; HIGH ORDERS; IN NETWORKS; INTRUSION DETECTION SYSTEM; KEY ELEMENTS; MARKOVIAN MODELS; MIXTURE TRANSITION MODEL; MODELING NETWORKS; NETWORK ANOMALIES; NETWORK ANOMALY DETECTIONS; NON-HOMOGENEOUS MARKOV CHAIN; SECURITY ATTACKS; STATISTICAL APPROACHES; STATISTICAL TECHNIQUES;

INTRUSION DETECTION;

EID: 60349108231     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (11)

1. Kemmerer, R.A., Vigna, G., Intrusion Detection: a Brief History and Overview, IEEE Security and Privacy (supplement to Computer, vol. 35, no. 4) pp 27-30, April 2002
2. Ye, N., Yebin Zhang, Y., and Borror, C.M., Robustness of the Markov-Chain for Cyber-Attack Detection, IEEE Transactions on Reliability, Vol. 53, no. 1, pp. 116-123, March 2004
3. Ju, W-H and Vardi, Y., A Hybrid High-order Markov Chain Model for Computer Intrusion Detection, NISS, Technical Report Number 92, February 1999.
4. Schonlau, M., et al., Computer Intrusion: Detecting Masquerades, NISS, Technical Report Number 95, March 1999.
5. Ye, N., Ehiabor, T., and Zhanget, Y., First-order Versus High-order Stochastic Models for Computer Intrusion Detection, Quality and Reliability Engineering International, 18:243-250, 2002.
6. Raftery, A.E., A model for high-order Markov chains, Journal of the Royal Statistical Society, series B, 47, 528-539, 1985.
7. Raftery, A.E. and Tavare, S. Estimation and modelling repeated patterns in high-order Markov chains with the mixture transition distribution (MTD) model, Journal of the Royal Statistical Society, series C - Applied Statistics, 43, 179-200, 1994.
8. Vardi, Y. and Lee, D., From Image deblurring to Optimal investments: Maximum Likelihood Solutions for Positive Linear Inverse Problem, Journal of the Royal Statistical Society, series B, 55, 569-612, 1993.
9. Iusem, A.N. and Svaiter, B.F., A New Smoothing-Regularization Approach for a Maximum-Likelihood Estimation Problem, Applied Mathematics and Optimization, 29:225-241, 1994.
10. Mood, A.M., Graybill, F.A., and D. C. Boes, D.C., Introduction to the Theory of Statistics 3rd ed. Tokyo, Japan: McGraw-Hill, 1974.
11. Lippmann, R., et al., The 1999 DARPA Off-Line Intrusion Detection Evaluation, Computer Networks Volume 34, Issue 4, October 2000, Pages 579-595.