RAPID: Reputation based approach for improving intrusion detection effectiveness

2010 6th International Conference on Information Assurance and Security, IAS 2010

Volumn , Issue , 2010, Pages 118-124

  Thomas, Ashley ^a  

^a Secure Works Inc   (United States)

Author keywords

False positive reduction; Intrusion detection systems; Reputation

Indexed keywords

BAYESIAN DETECTION; FALSE POSITIVE; FALSE-POSITIVE REDUCTION; INCOMING TRAFFIC; INTRUSION DETECTION SYSTEMS; IP ADDRESSS; OPEN SOURCES; PRACTICAL PROBLEMS; PROTOTYPE IMPLEMENTATIONS; PROTOTYPE SYSTEM; REPUTATION;

COMPUTER CRIME; NETWORK SECURITY;

INTRUSION DETECTION;

EID: 78349259754     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISIAS.2010.5604064     Document Type: Conference Paper

References (15)

1. T. Pietraszek, Using adaptive alert classification to reduce false positives in intrusion detection, in: RAID2004, (Vol. 3324) of Lecture Notes in Computer Science, Sophia Antipolis, France, 2004. Springer-Verlag, pp. 102-124.
2. Stefan Axelsson, "The base-rate fallacy and its implications for the difficulty of intrusion detection", Proceedings of the 6th ACM Conference on Computer and Communications Security, 1999 pp 1-7
3. Nong Ye: "Secure Computer and Network Systems: Modeling, Analysis and Design", Published by John Wiley and Sons, 2008
4. Mihai Christodorescu and Shai Rubin, "Can Cooperative Intrusion Detectors Challenge the Base-Rate Fallacy",Published in Malware Detection, volume 27 of Advances in Information Security. Springer-Verlag, October 2006."
5. Martin Roesch, "Snort: Lightweight intrusion detection for networks, 13th Systems Administration Conference (LISA99), pp 229-238. USENK Associations, 1999.
6. Dug Song, 2002, Fragroute, http://www.monkey.org/dugsong/fragroute/
7. Damiano Bolzoni, Bruno Crispo and Sandro Etalle ATLANTIDES: An Architecture for Alert Verification in Network Intrusion Detection Systems, 2007
8. Snort Ruleset Download. http://www.snort.org/start/rules
9. Peter Mell, Vincent Hu, Richard Lippmann, Josh Haines, Marc Zissman: An Overview of Issues in Testing Intrusion Detection Systems http://csrc.nist.gov/ publications/nistir/nistir-7007.pdf
10. P. Michiardi and R. Molva, Core: A Collaborative Reputation mechanism to enforce node cooperation in Mobile Ad Hoc Networks," Communication and Multimedia Security Conference (CMS'02), September 2002.
11. Holly Esquivel, Tatsuya Mori and Aditya Akella and Almir Mutapcic. On the Effectiveness of IP reputation for Spam Filtering, COMSNETS 2010
12. A. Valdes and K. Skinner. Probabilistic Alert Correlation. Proceedings of the 4th Intl Symposium on Recent Advances in Intrusion Detection (RAID) 2001.
13. H. Debar and A. Wespi, Aggregation and Correlation of Intrusion-Detection Alerts, Proceedings of the 4th International Symposium on Recent Advances in Intrusion Detection (RAID) 2001
14. R. P. Lippmann, Joshua W. Haines, David J. Fried, Jonathan Korba, and Kumar Das, The 1999 DARPA Off-Line Intrusion Detection Evaluation, Computer Networks, In Press, 2000.
15. Guofei Gu, Prahlad Fogla, David Dagon, Wenke Lee. Measuring intrusion detection capability: An information-theoretic approach. In Proceedings of ACM Symposium on Information, Computer & Communications Security (ASIACCS'06)