Eigenconnections to intrusion detection

IFIP Advances in Information and Communication Technology

Volumn 147, Issue , 2004, Pages 241-258

  Bouzida, Yacine ^a   Gombault, Sylvain ^a  

^a ECOLE DES MINES DE NANTES   (France)

Author keywords

Decision trees; Intrusion detection; KDD 99; Nearest neighbor; Principal component analysis

Indexed keywords

DECISION TREES; FORESTRY; INTRUSION DETECTION; MACHINE LEARNING; PRINCIPAL COMPONENT ANALYSIS; VECTOR SPACES;

DATA ELEMENTS; DECISION PROCESS; FEATURE SPACE; INFORMATION QUANTITY; INTRUSION DETECTION SYSTEMS; KDD 99; NEAREST NEIGHBORS; ROUGH DATA;

LEARNING ALGORITHMS;

EID: 79551665842     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/1-4020-8143-x_16     Document Type: Conference Paper

References (28)

1. Agrawal, R. and Joshi, M. V. (2000). PNrule: A New Framework for Learning Classifier Models in Data Mining A Case-Study in Network Intrusion detection. Technical Report RC-21 719, IBM Research Division.
2. Anderson, J. P. (1980). Computer Security Threat Monitoring and Surveillance. Technical report, James. P. Andcrson Co., Fort Washington, Pennsylvania.
3. Bay, S. D. (1998). Combining Nearest Neighbor Classificrs Through Multiple Feature Subsets. In Proceedings of the 15th International Conf on Machine Learning, pages 37-45, San Francisco, CA. Morgan Kaufmann.
4. Ben Amor, N., Benferhat, S., and EIOuedi, Z. (2004). Naive Bayes vs Decision Trees in Intrusion Detection Systems. In The 19th ACM Symposium On Applied Computing - SAC 2004, Nicosia, Cyprus.
5. Bouzida, Y. and Gombault, S. (2003). Intrusion Detection Using Principal Component Analysis. In Proceedings ofthe 7th World Multiconference on Systemics, Cybernetics and Informatics, Orlando, F1orida.
6. Breiman, L., Friedman, L. H., Olshen, R. A., and Stone, C. L. (1984). Classification and Regression Trees.
7. Dasarathy, B. V. (1991). A Computational Demand Optimization Aide for Nearest-NeighborBased Decision systems. In IEEE International Conference on Systems. Man and Cybernetics, pages 1777-1782. Morgan Kaufmann.
8. Denning, D. (1987). An Intrusion Detection Model. IEEE Transactions on Software Engineering, 13(2):222-232.
9. Eskin, E., Arnold, A., Prerau, M., Portnoy, L., and Stolfo, S. (2003). A Geometrie framework for unsupervised anomaly detection: Detecting intrusions in unlabeled data. Applications of Data Mining in Computer Security.
10. Fix, E. and Hodges, J. L. (1951). Discriminatory analysis: Nonparametrie discrimination: Consistency properties. Technical Report 2 I-49-004, USAF School of Aviation Medecine, Randolf Field, Texas.
11. Han, J. and Kambcr, M. (2001). Data Mining: Concepts and Techniques. Morgan Kaufmann Publishers.
12. Hettich, S. and Bay, S. D. (1999). The ucr KDD Archive. Available at: http://kdd.ics.uc.html.
13. Hotelling, H. (1933). Analysis of a complex statistical variables into principal components. Journal of Educational Psychology, 24:417-441.
14. IIgun, K. (1993). Ustat, a real time intrusion detection system for UNrX. In IEEE Symposium on Security and Privacy, pages 16-28, Oakland, CA.
15. Jolliffe, L.T. (2002). Principal Component Analysis. Springer Verlag, New York, NY, third edition.
16. KDD Cup (1999). KDD Cup 99 Intrusion Detection Datasets. Available at: http://kdd.ics.uci.eduldatabases/kddcup99/kddcup99.html.
17. KDD Task (1999). KDD 99 Task. Available at: http://kdd.ics.uci.eduldatabases/kddcup99/task.html.
18. Kirby, M. and Sirovich, L. (1990). Application of the KarhunenLoeve Procedure for the Characterization of Human Faces. IEEE Transactions On Pattern Analysis and Machine Intelligence, 12(1):103-107.
19. Kumar, S. and Spafford, E. (1994). A pattern matehing model for misuse intrusion detection. In Proceedings ofthe 17th National Computer security Conference, pages 11-21.
20. Lee, W., Stolfo, S. J., and Mok, K. (1999). Mining in a data flow environment: Experience in intrusion detection. In Proceeding of the 1999 Conference on Knowledge Discovery and Data Mining KDD-99.
21. Levin, I. (2000). KDD-99 Classifier Leaming Contest LLSoft's Results Overview. SIGKDD Explorations. ACM SIGKDD, 1:67-71.
22. Mitchell, T. M. (1997). Machine Leaming. McGraw Hill.
23. Pfahringer, B. (2000). Winning the KDD Classification Cup: Bagged Boosting. SIGKDD Explorations. ACM SIGKDD, 1:65-66.
24. Quinlan, J. R. (1986). Induction of decision trees. Machine Leaming, 1:1-106.
25. Quinlan J, R. (1993). C4.5: Programs for machine leaming. Morgan Kaufmann Publishers.
26. Roesch, M. (1999). Snort - Lightweight Intrusion Detection for Networks. In 13th Systems Administration Conference - USA 99.
27. Sabhnani, M. and Serpen, G. (2004). On Failure of Machine Leaming AIgorithms for detecting Misuse in KDD intrusion Detection Data Set. Intelligent Analysis. To Appear.
28. Turk, M. and Pentland, A. (1991). Eigenfaces for Recognition. Cognitive Neuroscience, 13(1):7196.