Attack pattern analysis framework for multiagent intrusion detection system

International Journal of Computational Intelligence Systems

Volumn 1, Issue 3, 2008, Pages 215-224

  Kołaczek, Grzegorz ^a   Juszczyszyn, Krzysztof ^a  

^a WROCLAW UNIVERSITY OF TECHNOLOGY   (Poland)

Author keywords

Agent systems; Intrusion detection; Ontology; Traffic analysis

Indexed keywords

AGENT SYSTEMS; ATTACK PATTERNS; DISTRIBUTED IDS; DISTRIBUTED PROCESSING; FORMAL FRAMEWORK; INTRUSION DETECTION SYSTEMS; MULTI-AGENT; NETWORK ANOMALIES; NETWORK COMMUNICATIONS; NETWORK TRAFFIC; ONTOLOGY-BASED; SECURITY INCIDENT; SPECIFIC VALUES; TRAFFIC ANALYSIS; TRAFFIC ANOMALIES; VIRUS SPREADING; WORM ATTACK;

COMPUTER VIRUSES; ONTOLOGY; VIRUSES;

INTRUSION DETECTION;

EID: 77952255205     PISSN: 18756891     EISSN: 18756883     Source Type: Journal    
DOI: 10.2991/ijcis.2008.1.3.3     Document Type: Article

References (20)

1. A. Beach, M. Modaff, Y.Chen, "Network Traffic Anomaly Detection and Characterization", cs.northwestern.edu/~ajb200/anomaly%20detection%20paper%201.0.pdf.
2. M. Burgess, "An Approach to Understanding Policy Based on Autonomy and Voluntary Cooperation", DSOM 2005, pp. 97-108.
3. M. Burgess, "Two Dimensional Time-Series for Anomaly Detection and Regulation in Adaptive Systems", DSOM 2002, pp. 169-180.
4. V. Gorodetski, O. Karsaev, A. I. Khabalov, Kotenko, L. Popyack, V. Skormin, "Agentbased model of Computer Network Security System: A Case Study", In: Proceedings of International Workshop Mathematical Methods, Models and Architectures for Computer Network Security, Lecture Notes in Computer Science, vol. 2052, Springer Verlag, Berlin Heidelberg New York, 2001, pp. 39-50.
5. K. Hwang, H. Liu, Y. Chen, "Cooperative Anomaly and Intrusion Detection for Alert Correlation in Networked Computing Systems", Technical Report, USC Internet and Grid Computing Lab (TR 2004-16), 2004.
6. T.M. Khoshgoftaar, M.E. Abushadi, "Resource-sensitive intrusion detection models for network traffic", Eighth IEEE International Symposium on Publication, 2004, pp. 249-258.
7. K Juszczyszyn, N.T. Nguyen, G. Kolaczek, A. Grzech, A. Pieczynska, R. Katarzyniak, "Agent-based Approach for Distributed Intrusion Detection System Design", International Conference on Computational Science 2006, United Kingdom, 2006, pp. 224-231.
8. K. Juszczyszyn, G. Kołaczek, "Assessing the Uncertainty of Communication Patterns in Distributed Intrusion Detection System", KES 2006, Lecture Notes in Artificial Intelligence 4252, 2006, pp. 243-250.
9. G. Kolaczek, A. Kuchtiak-Pieczynska, K. Juszczyszyn, A. Grzech, R. Katarzynak, N.T. Nguyen, "A Mobile Agent Approach to Intrusion Detection in Network Systems", Lecture Notes in Artificial Intelligence 3682, 2005, pp. 514-519.
10. I. Kotenko et al., "Multi-Agent Modeling and Simulation of Distributed Denial-of-Service Attacks on Computer Networks", In: Proceedings of Third International Conference Navy and Shipbuilding Nowaday. St. Petersburg, 2003, pp. 38-47.
11. M. Thottan, C. Ji., "Anomaly detection in IP networks", IEEE Transactions on Signal Processing, 51(8), 2003, pp. 2191-2204.
12. A. Lakhina, M. Crovella, C. Diot, "Characterization of Network-Wide Anomalies in Traffic Flows", Technical Report BUCS-2004-020, Boston University, http://citeseer.ist.psu.edu/715839.html, 2004.
13. C.E. Shannon, W. Weaver, "The mathematical theory of communication", University of Illinois Press, Urbana, 1949.
14. N.Weaver, V. Paxson, S.Staniford, R. Cunningham, "A taxonomy of computer worms", ACM Workshop on Rapid Malcode - WORM '03, ACM Press, New York, NY, 2003, pp. 11-18.
15. Allmanz M. et.al. A First Look at Modern Enterprise Traffic, In Proc. Internet Measurement Conference, October 2005, pp. 217-231.
16. Faloutsos M., Faloutsos P., Faloutsos C., On power-law relationships of the Internet topology. In Proc.ACM SIGCOMM '99 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, August 1999, pp. 251-262.
17. Kohler E., Liy J., Paxson V., Shenker S., Observed Structure of Addresses in IP Traffic, In Proc. SIGCOMM Internet Measurement Workshop, November 2002, pp. 253-266.
18. Nicol D., Liljenstam M., Liu J., Multiscale Modeling and Simulation of Worm Effects on the Internet Routing Infrastructure, In Proc. Performance Tools Conference, 2003, pp. 1-10.
19. G. Box, G. Jenkins, and G. Reinsel. Time Series Analysis. Prentice Hall, New Jersey, 1994.
20. M. Burgess. Two dimensional time-series for anomaly detection and regulation in adaptive systems. IFIP/IEEE 13th International Workshop on Distributed Systems: Operations and Management (DSOM 2002), 2002, pp. 169-181.