Learning rules for anomaly detection of hostile network traffic

Proceedings - IEEE International Conference on Data Mining, ICDM

Volumn , Issue , 2003, Pages 601-604

  Mahoney, Matthew V ^a   Chan, Philip K ^a  

^a Florida Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 78149297786     PISSN: 15504786     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (11)

1. R. Agrawal & R. Srikant, "Fast Algorithms for Mining Association Rules", Proc. 20th Intl. Conf. Very Large Data Bases, 1994.
2. D. Barbara, J. Couto, S. Jajodia, L. Popyack, & N. Wu, "ADAM: Detecting Intrusions by Data Mining", Proc. IEEE Workshop on Information Assurance and Security, 2001, pp. 11-16.
3. J. Hoagland, SPADE, Silicon Defense, http://www.silicondefense.com/ software/spice/, 2000.
4. W. E. Leland, M. S. Taqqu, W. Willinger, & D. W. Wilson, "On the Self-Similar Nature of Ethernet Traffic", Proc. ACM SIGComm, 1993.
5. R. Lippmann, J. W. Haines, D. J. Fried, J. Korba, & K. Das (2000), "The 1999 DARPA Off-Line Intrusion Detection Evaluation", Computer Networks 34(4), 2000, pp. 579-595.
6. M. Mahoney. Source code for PHAD, ALAD, LERAD, NETAD, SAD, EVAL3, EVAL4, EVAL and AFIL.PL is available at http://cs.fit.edu/~mmahoney/dist/
7. M. Mahoney & P. K. Chan, " Learning Rules for Anomaly Detection of Hostile Network Traffic", Florida Tech. technical report CS-2003-16, 2003.
8. V. Paxson, "Bro: A System for Detecting Network Intruders in Real-Time", Proc. 7'th USENIX Security Symposium, 1998.
9. V. Paxson, S. Floyd, "The Failure of Poisson Modeling", IEEE/ACM Transactions on Networking (3) , 1995, pp. 226-244.
10. M. Roesch, "Snort - Lightweight Intrusion Detection for Networks", Proc. USENIX Lisa, 1999.
11. A. Valdes & K. Skinner, "Adaptive, Model-based Monitoring for Cyber Attack Detection", Proc. RAID, 2000, pp. 80-92.