Learning problem and BCJR decoding algorithm in anomaly-based intrusion detection systems

Journal of Software

Volumn 2, Issue 6, 2007, Pages 42-52

  Jecheva, Veselina G ^a   Nikolova, Evgeniya P ^a  

^a BURGAS FREE UNIVERSITY   (Bulgaria)

Author keywords

Anomaly based intrusion detection; BCJR decoding algorithm; Hidden Markov Model; Intrusion detection; Learning problem

Indexed keywords

COMPUTER CRIME; DECODING; HIDDEN MARKOV MODELS; LEARNING ALGORITHMS;

ANOMALY BASED INTRUSION DETECTION SYSTEMS; ANOMALY-BASED INTRUSION DETECTION; BCJR DECODING ALGORITHM; CURRENT SYSTEM; DECODING ALGORITHM; GRADIENT-BASED METHOD; HIDDEN-MARKOV MODELS; INTRUSION-DETECTION; LEARNING PROBLEM; USER ACTIVITY;

INTRUSION DETECTION;

EID: 70349350844     PISSN: 1796217X     EISSN: None     Source Type: Journal    
DOI: 10.4304/jsw.2.6.42-52     Document Type: Article

References (37)

1. Abraham, A., Thomas, J., Distributed Intrusion Detection Systems: A Computational Intelligence Approach, Applications of Information Systems to Homeland Security and Defense, Idea Group Inc. Publishers, USA, Chapter 5, pp. 105-135, 2005.
2. Bahl L., Jelinek J., Raviv J., Raviv F., Optimal Decoding of Linear Codes for minimizing symbol error rate, IEEE Transactions on Information Theory, vol. IT-20, March 1974, pp.284-287.
3. Chan P., M. Mahoney, M. Arshad, Learning Rules and Clusters for Network Anomaly Detection, Workshop on Statistical and Machine Learning Techniques in Computer Intrusion Detection, George Mason University, Technical Report CS-2003-06, 2003.
4. Chebrolu, S.; Abraham A.; Thomas, J. P., Feature deduction and ensemble design of intrusion detection systems, Computers & Security, Volume 24, Issue 4, 1 June 2005, pp. 295-307.
5. Christodoresku M., S. Jha, Static Analysis of Executables to Detect Malicious Patterns, In Proceedings of the 12th USENIX Security Symposium, August 2003, pp.169-186.
6. Crosbie M., G. Spafford, Applying Genetic Programming to Intrusion Detection, Working Notes for the {AAAI} Symposium on Genetic Programming, 1995, pp.1-8.
7. Degang Y., C. Guo, W. Hui, L. Xiaofeng, Learning vector quantization neural network method for network intrusion detection, Wuhan University Journal of Natural Sciences, Volume 12, Number 1, 2007, ISSN 1007-1202, pp. 147-150.
8. Denning D., An intrusion-detection model, In Proceedings of IEEE Symposium on Security and Privacy, Oakland, USA, 1986, pp. 118-131.
9. Diaz-Gomez P. A., D. F. Hougen, MISUSE DETECTION: A Neural Network vs. a Genetic Algorithm Approach, In Proceedings of the Nineth International Conference on Enterprise Information Systems, 2007, pp. 459-462.
10. Ezekiel S., W. Oblitey, R. Trimble, Network Signal Analysis: A Wavelet Approach, Parallel and Distributed Computing and Networks, Innsbruck, Austria, 2005, 456-228, ISBN: 0-88986-468-3.
11. Forrest S., S.A. Hofmeyr, A. Somayaji, T.A. Longtaff, A Sense of Self for Unix Processes. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, Los Alamitors, CA, pp.120-128.
12. Forrest S., S.A. Hofmeyr, A. Somayaji, Intrusion detection using sequences of system calls, Journal of Computer Security, Vol. 6, 1998, pp. 151-180.
13. Fuchsberger A., Intrusion Detection Systems and Intrusion Prevention Systems, Information Security Technical Report, Volume 10, Issue 3, 2005, pp. 134-139.
14. Haghighat A. T., M. Esmaeili, A. Saremi, V. R. Mousavi, "Intrusion Detection via Fuzzy-Genetic Algorithm Combination with Evolutionary Algorithms, " ICIS, pp. 587-591, 6th IEEE/ACIS International Conference on Computer and Information Science (ICIS 2007), 2007.
15. Han Z.F.; J.P. Zou; H. Jin; Y.P. Yang; J. H Sun, Intrusion detection using adaptive time-dependent finite automata, Proceedings of 2004 International Conference on Machine Learning and Cybernetics, 2004, Vol. 5, pp. 3040-3045.
16. Hoang X.D., J. Hu, P. Bertok, A Multi-layer Model for Anomaly Intrusion Detection Using Program Sequences of System Calls, 11th IEEE International Conference on Networks (ICON 2003), Sydney, Australia, 2003.
17. Hou H., G. Dozier, Immunity-based intrusion detection system design, vulnerability analysis, and GENERTIA's genetic arms, Symposium on Applied Computing Proceedings of the 2005 ACM symposium on Applied computing, ISBN:1-58113-964-0, 2005, pp. 952-956.
18. Jin S., D. S. Yeung, X. Wang, Network intrusion detection in covariance feature space, Pattern Recognition, Volume 40, Issue 8, 2007, pp. 2185-2197.
19. Katos V., Network intrusion detection: Evaluating cluster, discriminant, and logit analysis, Information Sciences, Volume 177, Issue 15, 2007, ISSN: 0020-0255, pp. 3060-3073.
20. Kemp M., For whom the bells toll: effective IDS deployment strategies, Network Security, Volume 2005, Issue 5, May 2005, pp. 16-18.
21. Khanna R., H. Liu, Distributed and control theoretic approach to intrusion detection, Proceedings of the 2007 international conference on Wireless communications and mobile computing, Honolulu, Hawaii, USA, ISBN: 978-1-59593-695-0, pp. 115-120.
22. Ko C, G. Fink, K Levitt. Automated Detection of Vulnerabilities in Privileged Programs by Execution Monitoring, Proceedings of the 10th Annual computer Security Applications Conference, pp.134-144, 1994.
23. Michael C. C., A. Ghosh, "Simple, state-based approaches to program-based anomaly detection", ACM Transactions on Information and System Security, Vol. 5, No. 3, August 2002, pp. 203-237.
24. Moskovitch, R. P., S. Gus, I. Stopel, D. Feher, C. Parmet, Y. Shahar, Y. Elovici, Host Based Intrusion Detection using Machine Learning, Intelligence and Security Informatics, 2007 IEEE, USA, E-ISBN: 1-4244-1329-X, pp. 107-114.
25. Ourston, D.; Matzner, S.; Stump, W.; Hopkins, B. Applications of hidden Markov models to detecting multistage network attacks, Proceedings of the 36th Annual Hawaii International Conference on System Sciences, 2003. Issue 6-9, pp.10-15.
26. Platt A., N. Goharian: Short Query Sequences in Misuse Detection, Proceedings of IEEE International Conference on Intelligence and Security Informatics, ISI 2007, New Brunswick, New Jersey, USA,. IEEE 2007, pp.379-382.
27. Qian Q., M. Xin, Research on Hidden Markov Model for System Call Anomaly Detection, Intelligence and Security Informatics, PAISI 2007, Chengdu, China, Volume 4430/2007, pp.152-159
28. Rabiner L.R., A tutorial on Hidden Markov Models and selected applications in speech recognition, Proc. IEEE, 257-286, 77, 2, Feb 1989.
29. Rabiner L. R., B. H. Juang. An introduction to Hidden Markov Models, IEEE ASSP Magazine, pp.4-16, January 1986.
30. Rawat S., C. S. Sastry, Network Intrusion Detection Using Wavelet Analysis, Intelligent Information Technology, Proceedings of 7th International Conference on Information Technology, CIT 2004, Hyderabad, India, ISBN 978-3-540-24126-3, 2004, pp. 224-232.
31. Reddy Y.B., Genetic Algorithm Approach for Intrusion Detection, Proceedings of Modeling, Simulation, and Optimization MSO 2004, Hawaii, ISBN: 0-88986-424-1, 2004.
32. Sekar R., M. Bendre, Dhurjati, P. Bullineni, "A fast automaton-based method for detecting anomalous program behaviors, " IEEE Symposium on Security and Privacy, 2001. S&P 2001, pp. 144-155.
33. Sekar, R., Gupta, A., Frullo, J., Shanbhag, T., Tiwari, A., Yang, H., Zhou S., Specification-based anomaly detection: a new approach for detecting network intrusions, Proceedings of the 9th ACM conference on Computer and communications security, 2002, pp. 265-274.
34. Tandon G., P. Chan, On the Learning of System Call Attributes for Host-based Anomaly Detection, International Journal on Artificial Intelligence Tools, 15(6), pp. 875-892, 2006.
35. Tran T.P., T. Jan, A.J. Simmonds, A Multi-Expert Classification Framework for Network Misuse Detection, From Proceeding (544) Artificial Intelligence and Soft Computing, ISBN 0-88986-610-4, 2006.
36. Venkatachalam V., S. Selvan, Intrusion Detection using an Improved Competitive Learning Lamstar Neural Network, IJCSNS International Journal of Computer Science and Network Security, VOL.7 No.2, February 2007, pp. 255-263.
37. University of New Mexico's Computer Immune Systems Project, http://www.cs.unm.edu/~immsec/systemcalls.htm.