A survey of anomaly detection methods in networks

Proceedings - 1st International Symposium on Computer Network and Multimedia Technology, CNMT 2009

Volumn , Issue , 2009, Pages

  Zhang, Weiyu ^a   Yang, Qingbo ^a   Geng, Yushui ^a  

^a QILU UNIVERSITY OF TECHNOLOGY   (China)

Author keywords

Anomaly detection; Intrusion detection; Machine learning; Network security

Indexed keywords

ANOMALY DETECTION; ANOMALY DETECTION METHODS; FINITE STATE MACHINES; IN-NETWORK; MACHINE-LEARNING; STATISTICAL ANOMALY DETECTION;

INTERNET; LEARNING SYSTEMS; NETWORK SECURITY; SURVEYS;

INTRUSION DETECTION;

EID: 77949457636     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CNMT.2009.5374676     Document Type: Conference Paper

References (16)

1. H. S. Javitz and A. Valdes, The SRI Statistical Anomaly Detector, Proceedings of the 1991 IEEE Symposium on Research in Security and Privacy, May 1991.
2. D. E. Denning, An Intrusion Detection Model, IEEE Transactions on Software Engineering, SE-13, pp. 222-232, 19517.
3. S.E. Smaha, Haystack: An intrusion detection system, in: Proceedings of the IEEE Fourth Aerospace Computer Security Applications Conference, Orlando, FL, 1988, pp. 37-44.
4. S. Staniford, J.A. Hoagland, J.M. McAlerney, Practica automated detection of stealthy portscans, Journal of Computer Security 10, 2002, pp. 105-136.
5. H.H. Hosmer, Security is fuzzy!: applying the fuzzy logic paradigm to the multipolicy paradigm, in: Proceedings of the 1992-1993 Workshop on New Security Paradigms Little Compton, RI, United States, 1993.
6. J.E. Dickerson, J.A. Dickerson, Fuzzy network profiling for intrusion detection, in: Proceedings of the 19th International Conference of the North American Fuzzy Information Processing Society (NAFIPS), Atlanta, GA, 2000,pp. 301-306.
7. M. Crosbie, G. Spafford, Applying genetic programming to intrusion detection, in: Working Notes for the AAAI Symposium on Genetic Programming, Cambridge, MA, 1995, pp. 1-8.
8. D. Heckerman, A Tutorial on Learning With Bayesian Networks, Microsoft Research, Technical Report MSRTR-95-06, March 1995.
9. A. Valdes, K. Skinner, Adaptive model-based monitoring for cyber attack detection, in: Recent Advances in Intrusion Detection Toulouse, France, 2000, pp. 80-92.
10. C. Kruegel, D. Mutz, W. Robertson, F. Valeur, Bayesian event classification for intrusion detection, in: Proceedings of the 19th Annual Computer Security Applications Conference, Las Vegas, NV, 2003.
11. M.-L. Shyu, S.-C. Chen, K. Sarinnapakorn, L. Chang, A novel anomaly detection scheme based on principal component classifier, in: Proceedings of the IEEE Foundations and New Directions of Data Mining Workshop, Melbourne, FL, USA, 2003, pp. 172-179.
12. M.V. Mahoney, P.K. Chan, PHAD: Packet Header Anomaly Detection for Identifying Hostile Network Traffic Department of Computer Sciences, Florida Institute of Technology, Melbourne, FL, USA, Technical Report CS-2001-4, April 2001.
13. M.V. Mahoney, P.K. Chan, Learning Models of Network Traffic for Detecting Novel Attacks Computer Science Department, Florida Institute of Technology CS-2002-8, August 2002.
14. M.V. Mahoney, P.K. Chan, Learning nonstationary models of normal network traffic for detecting novel attacks, in:Proceedings of the Eighth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Edmonton, Canada, 2002, pp. 376-385.
15. P. Yi, Y. Jiang, Y. Zhong, and S. Zhang, Distributed Intrusion Detection for Mobile Ad hoc Networks, Proceedings of the 2005 Symposium on Applications and the Internet Workshops (SAINTW'05),pp. 94-97.
16. R. Sekar, A. Gupta, J. Frullo, T. Shanbhag, A. Tiwari, H. Yang, S. Zhou, Specification-based anomaly detection: a new approach for detecting network intrusions, Proceedings of the Ninth ACM Conference on Computer and Communications Security, Washington, DC, USA, November 18-22, 2002, pp. 265-274.