Combined data mining approach for intrusion detection

SECRYPT 2007 - International Conference on Security and Cryptography, Proceedings

Volumn , Issue , 2007, Pages 67-73

  Zurutuza, U ^a   Uribeetxeberria, R ^a   Azketa, E ^a   Gil, G ^a   Lizarraga, J ^a   Fernandez M ^a  

^a MONDRAGON UNIVERSITY   (Spain)

Author keywords

Alert correlation; Computer security; Data mining; Intrusion detection

Indexed keywords

ALERT CORRELATION; COMPUTER SECURITY; DATA MINING METHODS; DATA MINING TECHNIQUES; EXISTING PROBLEMS; INTRUSION DETECTION SYSTEMS;

COMPUTER CRIME; CRYPTOGRAPHY; DATA MINING; INFORMATION MANAGEMENT; MINING; SECURITY SYSTEMS;

INTRUSION DETECTION;

EID: 67649764420     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Ning, P., Ciu, Y., Reeves, D., 2002. Analyzing Intensive Intrusion Alerts Via Correlation. In Proceedings of the 5th International Symposium on Recent Advances in Intrusion Detection. Springer-Verlag, Switzerland, pp.74-94.
2. Debar, *H., Wespi, A., 2001. Aggregation and Correlation of Intrusion-Detection Alerts. In Proceedings of the 4th International Symposium on Recent Advances in Intrusion detection. Springer-Verlag, USA, pp. 85-103.
3. Cuppens, F., Miège, A., 2002. Alert Correlation in a Cooperative Intrusion Detection Framework. In Proceeding of the 2002 IEEE Symposium on Security and Privacy. IEEE Computer Society. USA, pp. 202
4. Templeton, S., Levitt, K., 2000. A requires/provides model for computer attacks. In Proceedings of the Workshop on New Security Paradigms, pp. 31- 38.
5. Zhou, J., Heckman, M., Reynolds, B., Carlson, A., Bishop, M., 2007. Modelling network intrusion detection alerts for correlation. ACM Transactions on Information and System Security 10 (1).
6. Julisch, K. 2003. Clustering Intrusion Detection Alarms to Support Root Cause Analysis. ACM Transactions on Information and System Security 6 (4). ACM Press, pp. 443-471.
7. Manganaris, S., Christensen, M., Zerkle, D., Hermiz, K., 2000. A Data Mining Analysis of RTID Alarms. Computer Networks 34 (4). Elsevier North-Holland, Inc., pp. 571-577.
8. Treinen, J.J., Thurimella, R., 2006. A framework for the application of association rule mining in large intrusion detection database. In Proceedings of the 9th International Symposium on Recent Advances in Intrusion Detection. Springer-Verlag, Zurich, pp. 1-18.
9. Clifton, C, Gengo, G., 2000. Developing custom intrusion detection filters using data mining. In 2000 Military Communications International Symposium. USA. pp. 22-25.
10. Valdés, A., Skinner, K., 2001. Probabilistic Alert Correlation. In Proceedings of the 4th International Symposium on Recent Advances in Intrusion Detection. Springer-Verlag. USA.
11. Dain, O., Cunningham, R.K., 2001. Fusing Heterogeneous Alert Streams into Scenarios. In Proceedings of the ACM CCS Workshop on Data Mining for Security Applications. Barbará and Jajodia. USA.
12. Witten, I., Frank, E., 2005. Data Mining: Practical Machine Learning Tools and Techniques. Morgan Kaufmann Series in Data Management Systems.
13. Dempster, A., Laird, N., Rubin, D., 1977. Maximum Likelihood for Incomplete Data via the EM Algorithm. Royal Statistical Society, Vol.1, N.I.
14. Agrawal, R., Srikant, R., 1994. Fast Algorithms for mining association rules in large databases. In Proceedings of 20th International Conference on Very Large Databases. Santiago de Chile, pp. 487-489.