A data correlation method for anomaly detection systems using regression relations

2009 1st International Conference on Future Information Networks, ICFIN 2009

Volumn , Issue , 2009, Pages 242-248

  Hassanzadeh, Amin ^a   Sadeghiyan, Babak ^a  

^a AMIRKABIR UNIVERSITY OF TECHNOLOGY   (Iran)

Author keywords

Anomaly detection; Confidence interval; Correlation coefficient; Correlation relation graph; Data correlation; Regression relation

Indexed keywords

ANOMALY DETECTION; ANOMALY DETECTION SYSTEMS; CONFIDENCE INTERVAL; CORRELATION COEFFICIENT; CORRELATION MATRIX; CORRELATION RELATIONS; DATA CORRELATIONS; DETECTION RATES; EQUIVALENT CLASS; FALSE ALARMS; GRAPH DATA; GRAPHICAL ILLUSTRATIONS; IN-LINE DETECTION; INDEPENDENT PARAMETERS; NORMAL BEHAVIOR; SECURITY PARAMETERS; TRAINING PHASE;

EQUIVALENCE CLASSES; INFORMATION SERVICES; REGRESSION ANALYSIS; SECURITY OF DATA;

CORRELATION METHODS;

EID: 72049095903     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICFIN.2009.5339579     Document Type: Conference Paper

References (15)

1. Christopher Kruegel, Fredrik Valeur, Govanni Vigna, Intrusion Detection and Correlation: Challenges and Solutions, Springer 2005.
2. T. Chyssler, S. Nadjm-Tehrani, "Alarm Reduction and Correlation in Defence of IP Networks", Proceedings of the 13th International Workshops on Enabling Technologies (WETICE04), IEEE Computer Society, June 2004, pp. 229-234.
3. T. Chyssler, S. Burschka, "Alarm Reduction and Correlation in Intrusion Detection Systems", Proceedings of Detection of Intrusions and Malware & Vulnarability Assessment workshop (DIMVA), Gesellschaft f r Informatik, June 2004, pp. 9-24.
4. U. Zurutuza and R. Uribeetxeberria, "Intrusion Detection Alarm Correlation: A Survey", Proceedings of the IADAT International Conference on Telecommunications and Computer Networks, December 2004.
5. P.Ning, Y.Cui, and D.S.Reeves, "Constructing attack scenarios through correlation of intrusion alerts", Proceeding of the 9th ACM Conference on Computer & Communications Security, Nov. 2002, pages 245-254.
6. D. Xu, P. Ning, "Alert Correlation through Triggering Events and Common Resources", 20th Annual Computer Security Applications Conference, December 2004.
7. Valdés, A., and Skinner, K., "Probabilistic Alert Correlation", Proceedings of the 4th International Symposium on Recent Advances in Intrusion detection (RAID), Springer Verlang, California, USA, 2001, pp. 54-68.
8. Carl Endorf, Eugene Schult, Jim Mellander, Intrusion Detection & Prevention, McGraw-Hill, 2004.
9. Anton Chuvakin, "Event Correlation in Security", www.securitydocs.com, May 2004.
10. Http: // kdd.ics.uci.edu / databases / kddcup99 / task.html.
11. T. T.Soong, Fundamentals of Probability and Statistics for Engineers, John Wiley and Sons Ltd, 2004.
12. Amin Hassanzadeh, A Comparison of Multilayer Data Correlation Techniques for Detection of User Threats, M.Sc thesis, Computer Engineering and IT Department, Amirkabir University of Technology, Tehran, Iran, March. 2006.
13. J. W. Haines, R. P. Lippmann, D. J. Fried, M. A. Zissman, E. Tran, S. B. Boswell, Intrusion Detection Evaluation: Design and Procedures, Technical Report 1062, Lincoln Laboratory, MIT University, Feb. 2001.
14. Amin Hassanzadeh, Babak Sadeghian, "Intrusion Detection with Data Correlation Relation Graph", Proceeding of IEEE conference in ARES 2008, Barcelona, Spain, March 3-5, 2008.
15. Richard A.Johnson, Dean W.Wichern, Applied Multivariate Statistical Analysis, 4th Edition,New Jersey, Prentice Hall. Trans. Roy. Soc.