A novel signal-based approach to anomaly detection in IDS systems

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5495 LNCS, Issue , 2009, Pages 527-536

  Saganowski, Łukasz ^a,b   Choraś, Michał ^a,b   Renk, Rafał ^a,c   Hołubowicz, Witold ^a,c  

^a ITTI SP Z O O   (Poland)

^b UNIVERSITY OF TECHNOLOGY AND LIFE SCIENCES   (Poland)

^c ADAM MICKIEWICZ UNIVERSITY   (Poland)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; MATCHING PURSUIT; TOLERANCE SYSTEMS; WORM DETECTION;

ALGORITHMS; SIGNAL DETECTION; SIGNAL PROCESSING;

INTRUSION DETECTION;

EID: 78650728514     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-04921-7_54     Document Type: Conference Paper

References (16)

1. Esposito, M., Mazzariello, C., Oliviero, F., Romano, S.P., Sansone, C.: Real Time Detection of Novel Attacks by Means of Data Mining Techniques. ICEIS (3), 120-127 (2005)
2. Esposito, M., Mazzariello, C., Oliviero, F., Romano, S.P., Sansone, C.: Evaluating Pattern Recognition Techniques in Intrusion Detection Systems. In: PRIS 2005, pp. 144-153 (2005)
3. FP7 INTERSECTION (INfrastructure for heTErogeneous, Reislient, Secure, Complex, Tightly Inter-Operating Networks) Project - Description of Work
4. Cheng, C.-M., Kung, H.T., Tan, K.-S.: Use of spectral analysis in defense against DoS attacks. In: IEEE GLOBECOM 2002, pp. 2143-2148 (2002)
5. Barford, P., Kline, J., Plonka, D., Ron, A.: A signal analysis of network traffic anomalies. In: ACM SIGCOMM InternetMeasurement Workshop 2002 (2002)
6. Huang, P., Feldmann, A., Willinger, W.: A non-intrusive, wavelet-based approach to detecting network performance problems. In: ACM SIGCOMM Internet Measurement Workshop (November 2001)
7. Li, L., Lee, G.: DDos attack detection and wavelets. In: IEEE ICCCN 2003, October 2003, pp. 421-427 (2003)
8. Dainotti, A., Pescape, A., Ventre, G.: Wavelet-based Detection of DoS Attacks. In: 2006 IEEE GLOBECOM, San Francisco, CA, USA (November 2006)
9. Mallat, S., Zhang: Matching Pursuit with time-frequency dictionaries. IEEE Transactions on Signal Processing 41(12), 3397-3415 (1993)
10. Troop, J.A.: Greed is Good: Algorithmic Results for Sparse Approximation. IEEE Transactions on Information Theory 50(10) (October 2004)
11. Gribonval, R.: Fast Matching Pursuit with a Multiscale Dictionary of Gaussian Chirps. IEEE Transactions on Signal Processing 49(5) (2001)
12. Jost, P., Vandergheynst, P., Frossard, P.: Tree-Based Pursuit: Algorithm and Properties. Swiss Federal Institute of Technology Lausanne (EPFL),Signal Processing Institute Technical Report,TR-ITS-2005.013 (May 17, 2005)
13. Dainotti, A., Pescape, A., Ventre, G.: Worm Traffic Analysis and Characterization. In: Proceedings of ICC, pp. 1435-1442. IEEE CS Press, Los Alamitos (2007)
14. Renk, R., Saganowski, Ł., Hołubowicz, W., Choraś, M.: Intrusion Detection System Based on Matching Pursuit. In: Proc. Intelligent Networks and Intelligent Systems, ICINIS 2008, pp. 213-216. IEEE CS Press, Los Alamitos (2008)
15. WIDE Project: MAWI Working Group Traffic Archive, tracer.csl.sony.co.jp/ mawi/
16. The CAIDA Dataset on the Witty Worm - March 19-24, Colleen Shanon and David Moore (2004), http://www.caida.org/passive/witty