A hybrid intrusion detection system design for computer network security

Computers and Electrical Engineering

Volumn 35, Issue 3, 2009, Pages 517-526

  Aydin, M Ali ^a   Zaim, A Halim ^a   Ceylan, K Gökhan ^a  

^a ISTANBUL UNIVERSITY   (Turkey)

Author keywords

Computer network security; Computer networks; Hybrid intrusion detection system; Intrusion detection systems

Indexed keywords

COMPUTER CRIME; COMPUTERS; HEURISTIC METHODS; HYBRID SYSTEMS; INTERNET; NETWORK SECURITY;

ANOMALY DETECTIONS; COMPUTER NETWORK SECURITY; DETECTION SYSTEMS; HYBRID INTRUSION DETECTION SYSTEM; INTRUSION DETECTION SYSTEMS; LINCOLN LABORATORIES; NETWORK TRAFFICS; OPEN-SOURCE PROJECTS; PACKET HEADERS; POWERFUL SYSTEMS; TEST BEDS;

INTRUSION DETECTION;

EID: 62249168871     PISSN: 00457906     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.compeleceng.2008.12.005     Document Type: Article

References (33)

1. Bace R. Intrusion detection (2000), Macmillan Technical Publishing, Indianapolis, USA
2. Scarfone K, Mell P. Guide to intrusion detection and prevention systems (IDPS). NIST Special Publication 800-94; 2007.
3. Bace R. An introduction to intrusion detection and assessment for system and network security management. ICSA Intrusion Detection Systems Consortium Technical Report; 1999.
4. Bace R, Mell P. Intrusion detection systems. NIST Special Publication on Intrusion Detection Systems; 2001, SP 800-31.
5. Dayioǧlu B. Use of passive network mapping to enhance network intrusion detection. Thesis (Master), The Graduate School of Natural and Applied Sciences of the Middle East Technical University; 2001.
6. Roesch M. Snort - lightweight intrusion detection for networks. In Proceedings of the 13th LISA conference of USENIX association; 1999.
7. Denning D.E. An intrusion-detection model. IEEE Trans Software Eng 13 2 (1997) 222-232
8. Javitz HS, Valdes A. The SRI IDES statistical anomaly detector. In Proceedings IEEE symposium on security and privacy, Oakland, CA; May 1991. p. 316-26.
9. Neumann PG, Porras PA. Experience with EMERALD to date. In First USENIX workshop on intrusion detection and network monitoring, Santa Clara, CA; 11-12 April 1999. p. 73-80.
10. Lankewicz L, Benard M. Real time anomaly detection using a nonparametric pattern recognition approach. In proceedings of the seventh annual computer security applications conference, San Antonio, TX; 2-6 December 1991. p. 80-9.
11. Noel S., Wijesekera D., and Youman C. Modern intrusion detection, data mining, and degrees of attack guilt, in applications of data mining in computer security (2002), Kluwer Academic Publisher
12. Lee W, Stolfo S. Data mining approaches for intrusion detection. In Proceedings of the seventh USENIX security symposium (SECURITY'98), San Antonio, TX; 26-29 January 1998.
13. Debar H, Becker M, Siboni, D. A neural network component for an intrusion detection systems. In Proceedings of the 1992 IEEE symposium on security and privacy, Oakland, CA; 4-6 May 1992. p. 240-50.
14. Ludovic M. GASSATA: a genetic algorithm as an alternative tool for security audit trails analysis. In First international workshop on the recent advances in intrusion detection, Louvain-la-Neuve, Belgium; 14-16 September 1998.
15. Kim J, Bentley P. The artificial immune model for network intrusion detection. In Seventh European congress on intelligent techniques and soft computing (EUFIT'99), Aachen, Germany; 13-19 September 1999.
16. Warrender C, Forrest S, Pearlmutter B. Detecting intrusions using systems call: alternative data models. In Proceedings of the 25th IEEE symposium on security and privacy, Oakland, CA; 9-12 May 1999. p. 133-45.
17. Mahoney MV, Chan PK. PHAD: packet header anomaly detection for identifying hostile network traffic. Florida Institute of Technology Technical Report, CS-2001-04.
18. Mahoney MV. Network traffic anomaly detection based on packet bytes. In Proceedings of ACM-SAC; 2003.
19. Mahoney MV, Chan PK. Learning nonstationary models of normal network traffic for detecting novel attacks. In Proceedings of eighth international conference on knowledge discovery and data mining; 2000. p. 376-85.
20. Mahoney MV, Chan PK. Learning models of network traffic for detecting novel attacks, Florida Institute of Technology Technical Report, CS-2002-08; 2003.
21. Mukherjee B., Heberlein L.T., and Levitt K.N. Network intrusion detection. IEEE Network 8 3 (1994) 26-41
22. Russell R. Snort intrusion detection 2.0 (2003), Syngress Publishing, Inc., Rockland, MA
23. JacobsonV, Mccanne S. Tcpdump: a tool for network monitoring and data acquisition. Berkeley, CA: Network Research Group, Lawrence Berkeley National Laboratory. .
24. Snort Users Manual 2.6.1; 3 December 2006. .
25. Rehman R.U. Intrusion detection systems with snort (2003), Publishing as Prentice Hall PTR, Upper Saddle River, New Jersey
26. Zhang J, Zulkernine M. Anomaly based network intrusion detection with unsupervised outlier detection. In Symposium on network security and information assurance - proceedings of the IEEE international conference on communications (ICC), Istanbul, Turkey; June 2006.
27. Mahoney MV. A machine learning approach to detecting attacks by identifying anomalies in network traffic. Thesis (PhD), Florida Institute of Technology; 2003.
28. Mahoney MV, Chan PK. An Analysis of the 1999 DARPA/Lincoln laboratory evaluation data for network anomaly detection. Recent advances in intrusion detection. In Sixth international symposium, Raid 2003, Pittsburgh, PA, USA; 8-10 September 2003. p. 220-39.
29. Kendall K. A database of computer attacks for the evaluation of intrusion detection systems. Master Thesis, Massachusetts Institute of Technology, Lexington, MA; 1999.
30. Lippman R., Haines J.W., Fried D.J., Korba J., and Das K. The 1999 DARPA off-line intrusion detection evaluation. Comput Networks 34 4 (2000) 579-595
31. Lippman R, Haines JW, Fried DJ, Korba J, Das K. Analysis and results of the 1999 DARPA off-line intrusion detection evaluation. In Proceedings of the third international workshop on recent advances in intrusion detection, Toulouse, France; 2-4 October 2000. p. 162-82.
32. Haines JW, Lippman R, Fried DJ, Zissman MA, Tran E, Boswell SB. 1999 DARPA intrusion detection evaluation: design and procedures. MIT Lincoln Laboratory Technical Report, TR-1062, Massachusetts, USA; 2001.
33. Data set, DARPA intrusion detection evaluation data set; 1999. .