Integrating anomaly-based approach into Bayesian network classifiers

Communications in Computer and Information Science

Volumn 48, Issue , 2009, Pages 127-139

  Benferhat, Salem ^a   Tabia, Karim ^a  

^a UNIVERSITÉ D'ARTOIS   (France)

Author keywords

Anomaly approach; Bayesian classifiers; Intrusion detection; Novelty detection

Indexed keywords

ANOMALY APPROACH; ANOMALY DETECTION; BAYESIAN CLASSIFICATION; BAYESIAN CLASSIFIER; BAYESIAN NETWORK CLASSIFIERS; DECISION RULES; EXPERIMENTAL STUDIES; FALSE ALARM RATE; HTTP TRAFFIC; NOVELTY DETECTION;

CLASSIFIERS; DISTRIBUTED PARAMETER NETWORKS; ELECTRONIC COMMERCE; INFERENCE ENGINES; INTELLIGENT NETWORKS; INTRUSION DETECTION; SPEECH RECOGNITION; TELECOMMUNICATION;

BAYESIAN NETWORKS;

EID: 73349119373     PISSN: 18650929     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-05197-5_9     Document Type: Conference Paper

References (21)

1. Axelsson, S.: Intrusion detection systems: A survey and taxonomy. Technical Report 99-115, Chalmers Univ. (2000)
2. Barbaŕa, D., Wu, N., Jajodia, S.: Detecting novel network intrusions using bayes estimators. In: Proceedings of the First SIAM Conference on Data Mining (2001)
3. Ben-Amor, N., Benferhat, S., Elouedi, Z.: Naive bayesian networks in intrusion detection systems. In: ACM, Cavtat-Dubrovnik, Croatia (2003)
4. Benferhat, S., Tabia, K.: On the combination of naive bayes and decision trees for intrusion detection. In: CIMCA/IAWTIC, pp. 211-216 (2005)
5. Benferhat, S., Tabia, K.: Classification features for detecting server-side and client-side web attacks. In: 23rd International Security Conference, Italy (2008)
6. Benferhat, S., Tabia, K.: Context-based profiling for anomaly intrusion detection with diagnosis. In: ARES 2008: Third International Conference on Availability, Reliability and Security, Barcelona, Spain (2008)
7. Elkan, C.: Results of the KDD 1999 classifier learning. SIGKDD Explorations 1(2), 63-64 (2000)
8. Friedman, N., Geiger, D., Goldszmidt, M.: Bayesian network classifiers. Machine Learning 29(2-3), 131-163 (1997)
9. Ingham, K.L., Inoue, H.: Comparing anomaly detection techniques for HTTP. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol.4637, pp. 42-62. Springer, Heidelberg (2007)
10. Jensen, F.V.: An Introduction to Bayesian Networks. UCL press, London (1996)
11. Kruegel, C., Mutz, D., Robertson, W., Valeur, F.: Bayesian event classification for intrusion detection. In: 19th Annual Computer Security Applications Conference, Las Vegas, Nevada (2003)
12. Kumar, S., Spafford, E.H.: An application of pattern matching in intrusion detection. Tech. Rep. CSD-TR-94-1013, Department of Computer Scien'ces, Purdue University, West Lafayette (1994)
13. Lee, W.: A data mining framework for constructing features and models for intrusion detection systems. PhD thesis, New York, NY, USA (1999)
14. Lippmann, R., Haines, J.W., Fried, D.J., Korba, J., Das, K.: The 1999 darpa off-line intrusion detection evaluation. Computer Networks 34(4) (2000)
15. Neumann, P.G., Porras, P.A.: Experience with EMERALD to date, pp. 73-80 (1999)
16. Quinlan, J.R.: Induction of decision trees. Mach. Learn. 1(1) (1986)
17. Riancho, A.: w3af - web application attack and audit framework (2007)
18. Sebyala, A.A., Olukemi, T., Sacks, L.: Active platform security through intrusion detection using naive bayesian network for anomaly detection. In: Proceedings of the London Communications Symposium (2002)
19. Snort. Snort: The open source network intrusion detection system (2002), http://www.snort.org
20. Tombini, E., Debar, H., Me, L., Ducasse, M.: A serial combination of anomaly and misuse idses applied to http traffic. In: ACSAC 2004: Proceedings of the 20th Annual Computer Security Applications Conference, pp. 428-437 (2004)
21. Valdes, A., Skinner, K.: Adaptive, model-based monitoring for cyber attack detection. In: Debar, H., Ḿe, L., Wu, S.F. (eds.) RAID 2000. LNCS, vol.1907, pp. 80-92. Springer, Heidelberg (2000)