An information-theoretic combining method for multi-classifier anomaly detection systems

IEEE International Conference on Communications

Volumn , Issue , 2010, Pages

  Ashfaq, Ayesha Binte ^a   Javed, Mobin ^a   Khayam, Syed Ali ^a   Radha, Hayder ^b  

^a NATIONAL UNIVERSITY OF SCIENCES AND TECHNOLOGY NUST   (Pakistan)

^b Michigan State University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCURACY RATE; ANOMALY DETECTION SYSTEMS; CLASSIFIER COMBINING; COMBINING METHOD; COMBINING PROCESS; COMBINING SCHEMES; COMBINING TECHNIQUES; DATA SETS; DETECTION RATES; FALSE ALARM RATE; INDIVIDUAL CLASSIFIERS; MULTI-CLASSIFIER; MULTIPLE CLASSIFIERS; NETWORK ANOMALIES; NETWORK ANOMALY DETECTION; NOVEL INFORMATION; REAL-WORLD; STANDARD DEVIATION;

DETECTORS; ERRORS; INFORMATION THEORY;

CLASSIFIERS;

EID: 77955347054     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2010.5501984     Document Type: Conference Paper

References (23)

1. R.P. Lippmann, J.W. Haines, D.J.Fried, J. Korba, K. Das, "The 1999 DARPA OffLine Intrusion Detection Evaluation," Comp. Networks, 34(2):579-595, 2000.
2. A.B. Ashfaq, M. Joseph, A. Mumtaz, M.Q. Ali, A. Sajjad and S.A. Khayam, "A Comparative Evaluation of Anomaly Detectors under Portscan Attacks," RAID, 2008.
3. C. Wong, S. Bielski, A. Studer, C. Wang, "Empirical Analysis of Rate Limiting Mechanisms," RAID, 2005.
4. N. Hatami and R. Ebrahimpour, "Combining Multiple Classifiers: Diversify with Boosting and Combining by Stacking," Intl Jrnl of Computer Science & Network Security (IJCSNS), (7)1, 2007.
5. L. Xu, A. Krzyzak, C.Y. Suen, "Methods of combining multiple classifiers and their applications to Handwriting Recognition," IEEE Trans on System, Man and Cybernetics, (22)3, 1992.
6. WiSNet LAB Dataset: http://www.wisnet.seecs.nust.edu.pk/downloads.php
7. LBNL/ICSI Enterprise Tracing Project, http://www.icir.org/ enterprisetracing/download. html
8. G. Giacinto, R. Perdisci , M. Del Rio and F. Roli, Intrusion detection in computer networks by a modular ensemble of one-class classifiers, Information Fusion, (9)1:69-82, 2008.
9. S.L. Scott, "A Bayesian paradigm for designing intrusion detection systems," Comput Stat and Data Analysis, 45(1):6983, 2004.
10. J. Kittler, M. Hatef, R.P.W. Duin and J. Matas, "On combining classifiers," IEEE Trans on Pattern Analysis and Machine Intelligence, 20(3):226-239, 1998.
11. A.F.R. Rahman, H. Alam, M.C. Fairhurst, "Multiple Classifier Combination for Character Recognition: Revisiting the Majority Voting System and Its Variations," Intl Workshop on Doc Analysis Sys, 2002.
12. M. C. Fairhurst and A. F. R. Rahman, "Enhancing Consensus in Multiple Expert Decision Fusion," IEE Proc. on Vision, Image and Signal Proc, 147(1):3946, 2000.
13. A. F. R. Rahman and M. C. Fairhurst, "Exploiting second order information to design a novel multiple expert decision combination platform for pattern classification," Electronics Letters, 33(6):476477, 1997.
14. M.M. Williamson, "Throttling viruses: Restricting propagation to defeat malicious mobile code," ACSAC, 2002.
15. J. Jung, V. Paxson, A.W. Berger, H. Balakrishnan, "Fast portscan detection using sequential hypothesis testing," IEEE Symp Sec and Priv, 2004.
16. S.E. Schechter, J. Jung, A.W. Berger, "Fast detection of scanning worm infections," RAID, 2004.
17. M.V. Mahoney, P.K. Chan, "PHAD: Packet Header Anomaly Detection for Indentifying Hostile Network Traffic," Florida Tech. Technical Report, CS-2001-4, 2001.
18. M.V. Mahoney, P.K. Chan, "Network Traffic Anomaly Detection Based on Packet Bytes," ACM SAC, 2003.
19. A. Lakhina, M. Crovella, C. Diot, "Diagnosing network-wide traffic anomalies," ACM SIGCOMM, 2004
20. A. Soule, K. Salamatian, N. Taft, "Combining Filtering and Statistical methods for anomaly detection," ACM/Usenix IMC, 2005.
21. Y. Gu, A. McCullum, D. Towsley, "Detecting anomalies in network traffic using maximum entropy estimation," ACM/Usenix IMC, 2005.
22. Next-Generation Intrusion Detection Expert System (NIDES), Available: http://www.csl.sri.com/projects/nides/.
23. R. Pang, M. Allman, V. Paxson, J. Lee, "The Devil and Packet Trace Anonymization," ACM CCR, 36(1), 2006.