Towards dynamic self-tuning for intrusion detection systems

Conference Proceedings of the IEEE International Performance, Computing, and Communications Conference

Volumn , Issue , 2010, Pages 17-24

  Kim, Sun Il ^a   Nwanze, Nnamdi ^b   Kintner, Jasen ^a  

^a UNIVERSITY OF ALASKA ANCHORAGE   (United States)

^b BINGHAMTON UNIVERSITY   (United States)

Author keywords

Anomaly detection; Concept drift; Intrusion detection; Network security

Indexed keywords

ALARM GENERATION; ANOMALY DETECTION; ANOMALY-BASED INTRUSION DETECTION; BLACK BOX SOLUTION; CONCEPT DRIFT; DETECTION STAGE; FALSE POSITIVE RATES; FINANCIAL MARKET; INCOMING PACKETS; INTRUSION DETECTION SCHEME; INTRUSION DETECTION SYSTEMS; RAPID PROCESSING; RE-TUNING; SELF-TUNING MECHANISMS; SELFTUNING; STATISTICAL ANALYSIS; TECHNICAL ANALYSIS;

ALARM SYSTEMS; COMPUTER CRIME; NETWORK SECURITY;

INTRUSION DETECTION;

EID: 79551562582     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PCCC.2010.5682339     Document Type: Conference Paper

References (15)

1. T. Ptacek and T. Newsham, "Insertion, evasion, and denial of service: Eluding network intrusion detection," in Secure Networks, Inc. 1998.
2. P. G. Neumann and P. A. Poras, "Experiences with emerald to date," in RAID 1999.
3. S. Kim and N. Nwanze, "Noise-resistant network intrusion detection," iEEE In the Proceedings of IPCCC, 2008.
4. N. Nwanze and D. Summerville, "Detection of anomalous network packets using lightweight stateless payload inspection," 4th IEEE LCN Workshop on Network Security (WNS) 2008.
5. I. Onuta and A. Ghorbani, "Svision: A novel visual network-anomaly identification technique," Computer Security, May 2007.
6. A. Gupta and R. Sekar, "An approach for detecting self-propagating email using anomaly detection," in RAID 2003.
7. D. Summerville, N. Nwanze, and V. Skormin, "Anomalous packet identification for network intrusion detection," in IEEE SMC-IAW 2004.
8. M. Mahoney, "Network traffic anomaly detection based on packet bytes," in 18th ACM Symp. Applied Computing 2003.
9. E. Eskin, A. Arnold, M. Prerau, L. Portnor, and S. Stolfo, "A geometric framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data," in Data Mining for Security App., Kluwer, 2002.
10. C. Kruegel, T. Toth, and E. Kirda, "Service specific anomaly detection for network intrusion detection," in Applied Computing (SAC), ACM Digital Library 2002.
11. F. Maggi, W. Robertson, C. Kruegel, and G. Vigna, "Protecting a moving target: Addressing web application concept drift," rAID 2009.
12. K. Wang, J. J. Parekh, and S. J. Stolfo, "Anagram: A content anomaly detector resistant to mimicry attack," in RAID 2006.
13. K. Wang and S. J. Stolfo, "Anomalous payload-based network intrusion detection," in Columbia University Technical Report, Feb. 2nd, 2004.
14. T. Lane and C. E. Brodley, "Approaches to online learning and concept drift for user identification in computer security," in In KDD. AAAI Press, pp. 259-263.
15. R. Klinkenberg, "Meta-learning, model selection, and example selection in machine learning domains with concept drift," in FGML-LWA), 2005.