Improvement in intrusion detection with advances in sensor fusion

IEEE Transactions on Information Forensics and Security

Volumn 4, Issue 3, 2009, Pages 542-551

  Thomas, Ciza ^a   Balakrishnan, N ^a  

^a INDIAN INSTITUTE OF SCIENCE   (India)

Author keywords

Chebyshev inequality; Data dependent decision (DD) fusion; Intrusion detection systems (IDSs); Neural network; Sensor fusion

Indexed keywords

CHEBYSHEV INEQUALITIES; CHEBYSHEV INEQUALITY; COMPUTING POWER; D-D FUSION; DATA-DEPENDENT DECISION (DD) FUSION; DETECTION RATES; EMPIRICAL EVALUATIONS; FALSE ALARMS; FUSION METHODS; INTRUSION DETECTION SYSTEMS; INTRUSION DETECTION SYSTEMS (IDSS); MULTIPLE SENSORS; PERFORMANCE OPTIMIZATIONS; SENSOR FUSION;

COMPUTER CRIME; NEURAL NETWORKS; SENSOR DATA FUSION; SENSOR NETWORKS; SENSORS;

INTRUSION DETECTION;

EID: 69749095234     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2009.2026954     Document Type: Article

References (27)

1. C. Siaterlis and B. Maglaris, "Towards multisensor data fusion for DoS detection," in ACM Symp. Applied Computing, Nicosia, Cyprus, Mar. 14-17, 2004.
2. T. Bass, "Multisensor data fusion for next generation distributed intrusion detection systems," in IRIS Nat. Symp., Laurel, MD, 1999.
3. G. Giacinto, F. Roli, and L. Didaci, "Fusion of multiple classifiers for intrusion detection in computer networks," Pattern Recognit. Lett., vol.24, no.12, pp. 1795-1803, Aug. 2003. (Pubitemid 36558001)
4. L. Didaci, G. Giacinto, and F. Roli, "Intrusion detection in computer networks by multiple classifiers systems," in Int. Conf. Pattern Recognition, Quebec, Canada, 2002.
5. Y. Wang, H. Yang, X. Wang, and R. Zhang, "Distributed intrusion detection system based on data fusion method," in Intelligent Control and Automation (WCICA), Hangzhou, China, Jun. 15-19, 2004.
6. C. Thomas and N. Balakrishnan, "Selection of intrusion detection threshold bounds for effective sensor fusion," in Proc. SPIE Int. Symp. Defense ans Security, Apr. 2007, vol.6570.
7. C. Thomas and N. Balakrishnan, "Advanced sensor fusion technique for enhanced intrusion detection," in IEEE Int. Conf. Intelligence and Security Informatics, Taipei, Taiwan, Jun. 8-11, 2008.
8. W. Hu, J. Li, and Q. Gao, "Intrusion detection engine on Dempster-Shafer's theory of evidence," in Proc. Int. Conf. Communications, Circuits and Systems, Jun. 2006, vol.3, pp. 1627-1631. (Pubitemid 351307331)
9. A. Siraj, R.B.Vaughn, andS. M. Bridges, "Intrusion sensor data fusion in an intelligent intrusion detection system architecture," in Proc. 37th Hawaii Int. Conf. System Sciences, Big Island, HI, 2004.
10. S. C. A. Thomopolous, R. Viswanathan, and D. K. Bougoulias, "Optimal distributed decision fusion," IEEE Trans. Aerosp. Electron. Syst., vol.25, no.5, pp. 761-765, Sep. 1989.
11. R. Perdisci, G. Giacinto, and F. Roli, "Alarm clustering for intrusion detection systems in computer networks," in Engineering Applications of Artificial Intelligence. Amsterdam, The Netherlands: Elsevier, 2006.
12. A. Valdes and K. Skinner, "Probabilistic alert correlation," in Lecture Notes in Computer Science. New York: Springer Verlag, 2001.
13. O. M. Dain and R. K. Cunningham, "Building scenarios from a heterogeneous alert stream," in IEEE Workshop Information Assurance and Security, 2001.
14. F. Cuppens and A. Miege, "Alert correlation in a cooperative intrusion detection framework," in Proc. 2002 IEEE Symp. Security and Privacy, 2002.
15. B. Morin and H. Debar, "Correlation of intrusion symptoms: An application of chronicles," in RAID, 2003.
16. H. Debar and A. Wespi, "Aggregation and correlation of intrusion-detection alerts," in RAID, 2001.
17. M. V. Mahoney and P. K. Chan, Detecting Novel Attacks by Identifying Anomalous Network Packet Headers Florida Institute of Technology, Tech. Rep. CS-2001-2002
18. M. V. Mahoney and P. K. Chan, "Learning non stationary models of normal network traffic for detecting novel attacks," in SIGKDD, 2002.
19. R. R. Tenney and N. R. Sandell, "Detection with distributed sensors," IEEE Trans. Aerosp. Electron. Syst., vol.AES-17, no.4, pp. 501-510, Jul. 1981.
20. C. Elkan, "Results of the KDD'99 classifier learning," SIGKDD Explorations, vol.1, no.2, pp. 62-63, Jan. 2000.
21. M. V. Mahoney, "A Machine Learning Approach to Detecting Attacks by Identifying Anomalies in Network Traffic," Ph.D. thesis, Florida Institute of Technology, Melbourne, 2003.
22. R. P. Lippmann, "An introduction to computing with neural nets," IEEEASSP Mag., vol.4, pp. 4-22, Apr. 1987.
23. DARPA Intrusion Detection Evaluation Data Set [Online]. Available: http://www.ll.mit.edu/IST/ideval/data/data-index.html
24. J. McHugh, "Testing intrusion detection systems: A critique of the 1998 and 1999 DARPA IDS evaluations as performed by Lincoln laboratory," ACM Trans. Inf. Syst. Security, vol.3, no.4, pp. 262-294, Nov. 2000.
25. M. V. Mahoney and P. K. Chan, An Analysis of the 1999 DARPA/ Lincoln Laboratory Evaluation Data for Network Anomaly Detection Tech. Rep. CS-2003-2102, unpublished.
26. C. Thomas and N. Balakrishnan, "Usefulness of DARPA data set in intrusion detection system evaluation," in Proc. SPIE Int. Defense and Security Symp., 2008.
27. M. V. Joshi, "On evaluating performance of classifiers for rare classes," in Proc. 2002 IEEE Int. Conf. Data Mining, 2002, pp. 641-644.